Malware4 min read
Nx Console VS Code Extension Hijacked for 11 Minutes
Attackers published malicious Nx Console 18.95.0 to VS Code Marketplace, stealing developer credentials via triple-channel exfiltration and Sigstore-signed npm package poisoning.
James RiveraMay 19, 2026