corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a08218-2340-708c-901a-e9937a261465

Postmortem: Nx Console v18.95.0 supply-chain compromise

Nx Blog · published 21 May 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at nx.dev Wayback capture
3blogs citing
First cited
27 Jan 2026
Most recent
22 Sept 2026
Rank this month
not ranked
Links from this post
7
Words captured
3,296

Cited by

Blog
In the post
Date
Andrew Nesbitt | Software Engineer and Package Management Nerd
Unfinished Work in Package Security Read at the source ↗
22 Sept 2026
Andrew Nesbitt | Software Engineer and Package Management Nerd
Package Manager Trends Read at the source ↗
10 Sept 2026
voidst.one
Defending Your IDE — Protecting Against Malicious or Compromised Visual Studio Extensions Read at the source ↗
25 May 2026
christian-schneider.net
Dependency cooldowns: a simple supply chain fix Read at the source ↗
27 Jan 2026

Links from this post

Link
Host
Postmortem: TanStack npm supply-chain compromise Read at the source ↗
tanstack.com
https://github.com/nrwl/nx-console/security/advisories/GHSA-c9j4-9m59-847w
github.com
https://github.com/nrwl/nx-console/issues/3139
github.com
https://github.com/advisories/GHSA-g7cv-rxg3-hmpx
github.com
https://docs.github.com/en/actions/how-tos/deploy/configure-and-manage-deployments/create-custom-protection-rules
docs.github.com
https://www.stepsecurity.io/blog/nx-console-vs-code-extension-compromised
stepsecurity.io
https://nvd.nist.gov/vuln/detail/CVE-2026-45321
nvd.nist.gov