🧰 Nx Console VS Code extension

The items that name it 5

• Shai-Hulud was the best thing to happen to supply chain security
  article2026-08-24

  Compromised in Mini Shai-Hulud III using credentials stolen during TanStack attack, May 18-19, 2026

• The OpenSourceMalware Show #8
  talk2026-06-11
• The OpenSourceMalware Show #7
  talk2026-06-03

  Compromised roughly two weeks before the episode; poor public response from vendor

• Nx Console VS Code Extension Compromised
  writeup2026-06-02It is written here as Nx Console (nrwl.angular-console) VS Code extension.

  nrwl.angular-console

• GitHub breached via a malicious VS Code extension: why developer devices are the real target
  article2026-05-20

  2.2 million installs, verified publisher status; briefly backdoored with a malicious version that silently collected credentials (including reading .env files) from the moment a developer opened any workspace; malicious 2,777-byte JavaScript payload injected into a minified file; live for 18 minutes