Nx Console v18.95.0: Malicious VS Code Extension Harvests Claude Code Credentials
Nx Console v18.95.0: Malicious VS Code Extension Harvests Claude Code Credentials is a critical-severity supply chain compromise issue in nrwl.angular-console, an IDE extension. Affected: nrwl.angular-console v18.95.0 (Microsoft VS Code Marketplace).
Is nrwl.angular-console running on your developers' machines? Anomity finds every device with this IDE extension installed, shows the version, and can block it by policy. Detect this across your developers' devices with Anomity →
Key facts
- ID
nx-console-v18-95-0-malicious-vs-code-extension-harvests-claude-code- Severity
- critical
- Attack type
- Supply chain compromise, Credential theft
- Component
- VS Code · IDE extension
- Known exploited
- No known exploitation
- Published
- Last verified
What is this vulnerability?
A malicious build of the Nx Console VS Code extension, nrwl.angular-console v18.95.0 (2.2M+ installs), was published to the Microsoft VS Code Marketplace on May 18. The build executed on any workspace open, fetched a 498 KB obfuscated payload from a dangling commit in the official nrwl/nx repo, and harvested GitHub, npm, AWS, Vault, 1Password, and notably ~/.claude/settings.json. Live for ~11 minutes before takedown; OpenVSX was unaffected. Believed to be the first supply-chain payload purpose-built to steal AI coding-assistant credentials.
Affected versions
| Affected | Fixed in |
|---|---|
nrwl.angular-console v18.95.0 (Microsoft VS Code Marketplace) | No fixed version listed |
Am I affected by this vulnerability?
You are affected if you run nrwl.angular-console v18.95.0 (Microsoft VS Code Marketplace).
How do I fix it?
Remove nrwl.angular-console v18.95.0 if installed. Rotate Claude API keys, GitHub tokens, npm tokens, AWS credentials, Vault tokens, and 1Password vaults accessed from any machine that opened a workspace with this extension active. Switch to the OpenVSX build of Nx Console where possible.
How do I find every machine running nrwl.angular-console?
Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run nrwl.angular-console and which version, then enforce a policy on it.