The Nx Dev Tools CEO confirms that his company's Nx Console VS Code extension served as the initial entry point for the GitHub repo hack: https://x.com/jeffbcross/status/2057236396658811020
Nx incident: https://github.com/nrwl/nx-console/security/advisories/GHSA-c9j4-9m59-847w
Step Security report: https://www.stepsecurity.io/blog/nx-console-vs-code-extension-compromised
Catalin Cimpanu
npub1s6…mrmen
2026-05-21 11:44:13 UTC
Author Public Key
npub1s69ytgd44h8539aftjc83pfc8w6w35gnmqqje6n42wqkvkepdwcs7mrmenPublished at
2026-05-21 11:44:13 UTCEvent JSON
{
"id": "349be79092637a43ed3d5b0031c899a5015a9192c729e06bdf5ad06d78da45c0",
"pubkey": "868a45a1b5adcf4897a95cb07885383bb4e8d113d8012cea755381665b216bb1",
"created_at": 1779363853,
"kind": 1,
"tags": [
[
"proxy",
"https://mastodon.social/@campuscodi/116612389523914703",
"web"
],
[
"proxy",
"https://mastodon.social/users/campuscodi/statuses/116612389523914703",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://mastodon.social/users/campuscodi/statuses/116612389523914703",
"pink.momostr"
],
[
"-"
]
],
"content": "The Nx Dev Tools CEO confirms that his company's Nx Console VS Code extension served as the initial entry point for the GitHub repo hack: https://x.com/jeffbcross/status/2057236396658811020\n\nNx incident: https://github.com/nrwl/nx-console/security/advisories/GHSA-c9j4-9m59-847w\n\nStep Security report: https://www.stepsecurity.io/blog/nx-console-vs-code-extension-compromised",
"sig": "b78144b7462fdbf234a82af5b4d56d778b785d23b7a388d4b5a83d339774a42e98889640022fa365cd2234dc2898b601c086b08b89d518f7c3c2ff0ee7c3a3e4"
}