Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential Stealer

May 19, 2026

Cybersecurity researchers have flagged a compromised version of the Nx Console extension that was published to the Microsoft Visual Studio Code (VS Code) Marketplace.

The extension in question is rwl.angular-console (version 18.95.0), a popular user interface and plugin for code editors like VS Code, Cursor, and JetBrains. The VS Code extension has more than 2.2 million installations. The Open

Get Free Report & Network Analysis

Please check your email for the free report.