Ashish Kurmi

**Name of the Vulnerable Software and Affected Versions** Nx Console version 18.95.0 **Description** A supply chain compromise occurred where a malicious version of Nx Console, the user interface for Nx and Lerna, was published to official marketplaces. The compromised version was available in the Visual Studio Marketplace for approximately 18 minutes and in OpenVSX for approximately 36 minutes. This issue involves embedded malicious code and has been actively exploited. **Recommendations** Upgrade to version 18.100.0.