Hacker GitHub

← All repos

nrwl/nx-console

View on GitHub ↗ ★ 1,413 TypeScript

Nx Console is the user interface for Nx & Lerna.

14 mentions on Hacker News by 10 people: 3 stories, 11 comments · first 2025-09-22 · latest 2026-05-21

Mentions per year 14 mentions · busiest year 2026 (13)
20082026
AllStoriesComments NewestTopOldest
  1. I found more details on how this particular attack worked: https://github.com/nrwl/nx-console/security/advisories/GHSA-... https://github.com/nrwl/nx-console/issues/3148 So the extension basically rewrites files in `.github/workflows` and…
    comment by cloudbonsai · 2026-05-21 · in GitHub confirms breach of 3,800 repos via malicious VSCode extension
  2. …the link is blogspam. https://github.blog/security/investigating-unauthorized-acce... links to https://github.com/nrwl/nx-console/security/advisories/GHSA-... Nx Console
    comment by TiredOfLife · 2026-05-21 · in GitHub confirms breach of 3,800 repos via malicious VSCode extension
  3. https://github.com/nrwl/nx-console Looks like it
    comment by efilife · 2026-05-21 · in GitHub confirms breach of 3,800 repos via malicious VSCode extension
  4. …This allowed the attacker to run workflows on our GitHub repository as a contributor. More links: https://github.com/nrwl/nx-console/security/advisories/GHSA-... https://www.stepsecurity.io/blog/nx-console-vs-code-extensio...
    comment by vldszn · 2026-05-21 · in Nx Console VS Code extension was the initial access vector in the GitHub breach
  5. It’s nx console https://github.com/nrwl/nx-console/security/advisories/GHSA-...
    comment by Atotalnoob · 2026-05-21 · in GitHub confirms breach of 3,800 repos via malicious VSCode extension
  6. …was the compromised nx console extension that bit me yesterday. The timing seems identical. See https://github.com/nrwl/nx-console/security/advisories/GHSA-...
    comment by urbandw311er · 2026-05-20 · in GitHub confirms breach of 3,800 repos via malicious VSCode extension
  7. There are rumours that was NX Console VS code extension https://github.com/nrwl/nx-console/security/advisories/GHSA-... https://www.stepsecurity.io/blog/nx-console-vs-code-extensio...
    comment by vldszn · 2026-05-20 · in GitHub confirms breach of 3,800 repos via malicious VSCode extension
  8. …had to guess it is the NX console extension that was compromised yesterday. But I’m not 100% sure. https://github.com/nrwl/nx-console/security/advisories/GHSA-...
    comment by winkelwagen · 2026-05-20 · in GitHub is investigating unauthorized access to their internal repositories
  9. …this, it could be worth following that dependency chain too in case there are more. See here: https://github.com/nrwl/nx-console/security/advisories/GHSA-... PS: I posted on HN to try and alert people right after it was compromised but…
    comment by urbandw311er · 2026-05-19 · in Mini Shai-Hulud Strikes Again: 314 npm Packages Compromised
  10. …on how the attack was obfuscated & executed, I posted in the nx-console Issues board [here]( https://github.com/nrwl/nx-console/issues/3140 ) - (apols for the LLM-assisted post, as you would imagine I was in something of a hurry to report…
    comment by urbandw311er · 2026-05-18 · in Critical: Compromised Nx Console version 18.95.0
  11. …by default is the solution here I guess. I don’t know what the solution is for stuff like [this]( https://github.com/nrwl/nx-console/blob/d2fa56509679fc942bbc... ) where the editor plugin automatically uses the latest version, or where in…
    comment by abejfehr · 2025-09-22 · in Show HN: Tips to stay safe from NPM supply chain attacks