# nx-console-v18-95-0-malicious-vs-code-extension-harvests-claude-code: Nx Console v18.95.0: Malicious VS Code Extension Harvests Claude Code Credentials

> Nx Console v18.95.0: Malicious VS Code Extension Harvests Claude Code Credentials is a critical-severity supply chain compromise issue in nrwl.angular-console, an IDE extension. Affected: nrwl.angular-console v18.95.0 (Microsoft VS Code Marketplace).

- **Canonical URL:** https://catalog.anomity.ai/vuln/nx-console-v18-95-0-malicious-vs-code-extension-harvests-claude-code
- **Aliases:** ti-028
- **Severity:** critical
- **Attack type:** Supply chain compromise, Credential theft
- **Component:** nrwl.angular-console (IDE extension)
- **Catalog entry:** https://catalog.anomity.ai/agent/vscode
- **Exploited in the wild:** no known exploitation
- **Published:** 2026-05-18
- **Last verified:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/vuln/nx-console-v18-95-0-malicious-vs-code-extension-harvests-claude-code

## Summary

A malicious build of the Nx Console VS Code extension, nrwl.angular-console v18.95.0 (2.2M+ installs), was published to the Microsoft VS Code Marketplace on May 18. The build executed on any workspace open, fetched a 498 KB obfuscated payload from a dangling commit in the official nrwl/nx repo, and harvested GitHub, npm, AWS, Vault, 1Password, and notably ~/.claude/settings.json. Live for ~11 minutes before takedown; OpenVSX was unaffected. Believed to be the first supply-chain payload purpose-built to steal AI coding-assistant credentials.

## Affected versions

| Affected | Fixed in |
| --- | --- |
| nrwl.angular-console v18.95.0 (Microsoft VS Code Marketplace) | no fixed version listed |

## Am I affected by this vulnerability?

You are affected if you run nrwl.angular-console v18.95.0 (Microsoft VS Code Marketplace).

## How do I fix it?

Remove nrwl.angular-console v18.95.0 if installed. Rotate Claude API keys, GitHub tokens, npm tokens, AWS credentials, Vault tokens, and 1Password vaults accessed from any machine that opened a workspace with this extension active. Switch to the OpenVSX build of Nx Console where possible.

## How do I find every machine running nrwl.angular-console?

Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run nrwl.angular-console and which version, then enforce a policy on it.

## References

- advisory: https://www.stepsecurity.io/blog/nx-console-vs-code-extension-compromised

## Related vulnerabilities

- [checkmarx-supply-chain-compromise-malicious-vs-code-extensions-and](https://catalog.anomity.ai/vuln/checkmarx-supply-chain-compromise-malicious-vs-code-extensions-and) — critical
- [malicious-ai-assistant-extensions-harvest-llm-chat-histories-from-vs](https://catalog.anomity.ai/vuln/malicious-ai-assistant-extensions-harvest-llm-chat-histories-from-vs) — high
- [open-vsx-removes-77-malicious-evil-twin-ide-extensions](https://catalog.anomity.ai/vuln/open-vsx-removes-77-malicious-evil-twin-ide-extensions) — high
- [trojanized-claude-code-extension-2-1-313-in-cursor-s-marketplace](https://catalog.anomity.ai/vuln/trojanized-claude-code-extension-2-1-313-in-cursor-s-marketplace) — critical
- [litellm-1-107-0-compromised-on-pypi-and-docker-a-cook-pth-startup-hook](https://catalog.anomity.ai/vuln/litellm-1-107-0-compromised-on-pypi-and-docker-a-cook-pth-startup-hook) — critical
- [ghostaction-returns-a-security-audit-yml-workflow-pushed-from](https://catalog.anomity.ai/vuln/ghostaction-returns-a-security-audit-yml-workflow-pushed-from) — high

---

Source: Anomity Security Database (https://catalog.anomity.ai/vuln). Detect affected AI tools on developer devices: https://anomity.ai/?utm_source=catalog&utm_medium=vuln-md&utm_campaign=nx-console-v18-95-0-malicious-vs-code-extension-harvests-claude-code