Nx is a organization tracked across 3 threat clusters and 4 intelligence report mentions on ThreatCluster. First observed May 19, 2026; most recent activity July 8, 2026.
On May 19, 2026, GitHub announced an investigation into unauthorized access to internal repositories after a malicious Visual Studio Code extension was executed on an employee's device. The attack, attributed to the…
On May 18, 2026, a compromised version of the Nx Console VS Code extension was uploaded to the Visual Studio Code Marketplace, targeting developer credentials and cloud infrastructure tokens. This attack exploited…
Analysis shows that 38% of organizations using GitHub Actions workflows are exposed to script injection and unsafe trigger configurations. This vulnerability poses a significant risk in software supply chains, as GitHub…