5 ms·

There are rumours that was NX Console VS code extension https://github.com/nrwl/nx-console/security/advisories/GHSA-c9j4-9m59-847w https://github.com/nrwl/nx-c

by vldszn 4mo ago

There are rumours that was NX Console VS code extension https://github.com/nrwl/nx-console/security/advisories/GHSA-c9j4-9m59-847w https://github.com/nrwl/nx-console/security/advisories/GHSA-... https://www.stepsecurity.io/blog/nx-console-vs-code-extension-compromised https://www.stepsecurity.io/blog/nx-console-vs-code-extensio...

raverbashing 4mo ago
Sounds like another "why even bother" extension, made to automate things that shouldn't be automated
vldszn 4mo ago
[dead]
vldszn 4mo ago
UPD: it’s confirmed now by the CEO of Nx https://x.com/jeffbcross/status/2057236396658811020?s=46&t=_RN2fQnPTv5buAq00Oxwaw https://x.com/jeffbcross/status/2057236396658811020?s=46&t=_...
- bmandale 4mo ago
  > One of our developers was compromised by a recent supply-chain compromise on Tanstack ...which in turn was caused by bad design of github's CI pipeline. Funny how it all comes back around like that.
  - vldszn 4mo ago
    Yeah..full circle