Nx Console Extension Stealer Hits Developers
A compromised Nx Console 18.95.0 VS Code extension ran a credential stealer when developers opened workspaces, putting tokens, keys, and secrets at risk. Update to 18.100.0 or later and rotate exposed credentials.