🧰 Nx Console

The items that name it 12

• Introducing Socket Scanning for VS Code Marketplace Extensions
  articleas affected products2026-10-06

  Legitimate VS Code extension that received a malicious update, central to a May breach disclosed by GitHub

• Shai-Hulud was the best thing to happen to supply chain security
  articleas classification.key entities2026-08-24
• The OpenSourceMalware Show #12
  talkas classification.key entities2026-07-09
• Socket: Firewall Now Blocks Malicious VS Code and Open VSX Extensions
  articleas affected products2026-06-18

  Malicious release of the VS Code extension that reached both the Visual Studio Marketplace and Open VSX before removal; used in the GitHub employee device compromise disclosed May 2026.

• The OpenSourceMalware Show #8
  talkas classification.key entities2026-06-11
• The OpenSourceMalware Show #7
  talkas classification.key entities2026-06-03
• Nx Console VS Code Extension Compromised
  writeupas classification.key entities2026-06-02
• What MDM can't protect on developer machines (and what to do about it)
  articleas classification.key entities2026-05-28
• Socket: Mini Shai-Hulud
  articleas affected products2026-05-22It is written here as Nx Console (VS Code extension).

  2.2 million installs; poisoned v18.95.0 published to Visual Studio Marketplace, sat 18 minutes before takedown

• The Wild West of VS Code extensions and how a poisoned extension breached GitHub
  articleas affected products2026-05-20

  Popular VS Code extension for the Nx monorepo build system, 2.2 million installs, verified publisher badge; malicious build uploaded May 18 at 12:30 UTC, unpublished at 12:47 UTC (Visual Studio Marketplace) and live on OpenVSX from 12:33 UTC to 13:09 UTC.

• GitHub breached via a malicious VS Code extension: why developer devices are the real target
  articleas classification.key entities2026-05-20
• SubQuery npm package (@subql/common) compromised with credential-stealing payload
  articleas affected productsIt is written here as Nx Console (VS Code extension).

  Poisoned VS Code extension with 2.2 million installs, part of the attack wave; stole tokens from GitHub, npm, AWS, and 1Password.