nrwl.angular-console
MAL-2026-5161
VSCodebackdoor6/1/2026
Description
Malicious code in nrwl.angular-console (VSCode)
Indicators of Compromise
SHA256 Hashes (1)
12636eadc931d19fc68ca6d30f5397404c6b782a67537c770c944ed9337a4125
References (4)
https://www.stepsecurity.io/blog/nx-console-vs-code-extension-compromisedossf/malicious-packageshttps://nx.dev/blog/nx-console-v18-95-0-postmortemossf/malicious-packageshttps://github.com/nrwl/nx-console/security/advisories/GHSA-c9j4-9m59-847wossf/malicious-packageshttps://github.com/nrwl/nx-console/issues/3139ossf/malicious-packages
Details
EcosystemVSCode
Attack Typebackdoor
Published6/1/2026
Affected Versions
18.95.0
Quick Actions