{
  "entry": {
    "kind": "vuln",
    "slug": "nx-console-v18-95-0-malicious-vs-code-extension-harvests-claude-code",
    "name": "nx-console-v18-95-0-malicious-vs-code-extension-harvests-claude-code",
    "vendor": "nrwl.angular-console",
    "description": "A malicious build of the Nx Console VS Code extension, nrwl.angular-console v18.95.0 (2.2M+ installs), was published to the Microsoft VS Code Marketplace on May 18. The build executed on any workspace open, fetched a 498 KB obfuscated payload from a dangling commit in the official nrwl/nx repo, and harvested GitHub, npm, AWS, Vault, 1Password, and notably ~/.claude/settings.json. Live for ~11 minutes before takedown; OpenVSX was unaffected. Believed to be the first supply-chain payload purpose-built to steal AI coding-assistant credentials.",
    "website": "https://www.stepsecurity.io/blog/nx-console-vs-code-extension-compromised",
    "repository": null,
    "documentationUrl": null,
    "license": null,
    "version": null,
    "trustLevel": "advisory",
    "capabilities": [],
    "packaging": null,
    "configFiles": null,
    "category": "ide-extension",
    "updatedAt": "2026-05-18",
    "risk": {
      "score": 90,
      "band": "critical",
      "signals": [],
      "dangerousCombos": []
    },
    "dangerousCombos": [],
    "vuln": {
      "id": "nx-console-v18-95-0-malicious-vs-code-extension-harvests-claude-code",
      "aliases": [
        "ti-028"
      ],
      "title": "Nx Console v18.95.0: Malicious VS Code Extension Harvests Claude Code Credentials",
      "summary": "A malicious build of the Nx Console VS Code extension, nrwl.angular-console v18.95.0 (2.2M+ installs), was published to the Microsoft VS Code Marketplace on May 18. The build executed on any workspace open, fetched a 498 KB obfuscated payload from a dangling commit in the official nrwl/nx repo, and harvested GitHub, npm, AWS, Vault, 1Password, and notably ~/.claude/settings.json. Live for ~11 minutes before takedown; OpenVSX was unaffected. Believed to be the first supply-chain payload purpose-built to steal AI coding-assistant credentials.",
      "severity": "critical",
      "cvss": {
        "score": null,
        "vector": null,
        "version": null
      },
      "cwe": [],
      "attackType": [
        "Supply chain compromise",
        "Credential theft"
      ],
      "componentType": "ide-extension",
      "component": {
        "name": "nrwl.angular-console",
        "vendor": null,
        "package": null,
        "ecosystem": "vscode",
        "catalogSlug": "agent/vscode"
      },
      "affected": [
        {
          "range": "nrwl.angular-console v18.95.0 (Microsoft VS Code Marketplace)",
          "fixed": null
        }
      ],
      "exploited": false,
      "exploitPublic": false,
      "publishedAt": "2026-05-18",
      "modifiedAt": "2026-05-18",
      "lastVerified": "2026-11-01",
      "references": [
        {
          "type": "advisory",
          "url": "https://www.stepsecurity.io/blog/nx-console-vs-code-extension-compromised"
        }
      ],
      "mitigation": "Remove nrwl.angular-console v18.95.0 if installed. Rotate Claude API keys, GitHub tokens, npm tokens, AWS credentials, Vault tokens, and 1Password vaults accessed from any machine that opened a workspace with this extension active. Switch to the OpenVSX build of Nx Console where possible.",
      "detectedByAnomity": true
    }
  }
}