Research · May 27, 2026
Nx Console Vulnerability Exposes Users to Malicious Code
A malicious version of Nx Console was briefly available, exposing users to potential risks. Users are advised to upgrade to the safe version to mitigate any threats.
What changed
On May 19, 2026, a compromised version of Nx Console was uploaded to the Visual Studio Marketplace and OpenVSX. This version contained embedded malicious code and was available for a short duration before being removed.
The malicious version, 18.95.0, was accessible for approximately 18 minutes on Visual Studio Marketplace and around 36 minutes on OpenVSX, posing a significant risk to users who downloaded it.
Who is affected
The vulnerability primarily impacts users of Nx Console, especially those who downloaded the compromised version during its brief availability.
Organizations and developers utilizing Nx Console for their projects are at risk, particularly if they have not upgraded to the secure version.
- Users of Nx Console version 18.95.0.
- Developers relying on the Visual Studio Marketplace for tools.
- Organizations using Lerna in conjunction with Nx Console.
- Individuals who accessed OpenVSX during the window of exposure.
What to do
To mitigate the risks associated with this vulnerability, users should immediately upgrade to Nx Console version 18.100.0, which is confirmed to be secure.
It is also advisable for users to review their systems for any signs of compromise and to implement security measures to prevent future incidents.
- Upgrade to Nx Console version 18.100.0 or later.
- Monitor systems for any unusual activity or signs of malware.
- Educate teams about the importance of verifying software integrity before installation.
- Consider implementing additional security protocols for software downloads.