thehackernews.com·May 19, 2026
Cybersecurity researchers have identified a compromised version of the Nx Console extension (rwl.angular-console version 18.95.0) on the Microsoft VS Code Marketplace, which has over 2.2 million installations.
A key learning for you as a cybersecurity professional is the importance of monitoring and verifying the integrity of popular extensions in development environments, as they can be a vector for supply chain attacks. This incident with the compromised Nx Console extension underscores the need for implementing rigorous security checks and threat intelligence measures to detect and respond to such vulnerabilities promptly, protecting your organization's development processes from potential exploitation.