VulnWatch VulnWatch
← Back to dashboard
Unknown rss_thehackernews · rss_79b6f0e77988a6a0c1b6c213164b6f99

Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential Stealer

Published May 19, 2026

Cybersecurity researchers have flagged a compromised version of the Nx Console extension that was published to the Microsoft Visual Studio Code (VS Code) Marketplace.

The extension in question is rwl.angular-console (version 18.95.0), a popular user interface and plugin for code editors like VS Code, Cursor, and JetBrains. The VS Code extension has more than 2.2 million installations. The Open

Affected AI Products

cursor
Get the weekly digest. Every Monday: top AI security stories of the week. Free.