Actively exploited vulnerabilities affecting Nx products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2026-48027https://wildfortech.com/security#CVE-2026-48027A malicious version of the Nx Console extension was published, containing embedded malicious code that fetched an obfuscated payload capable of harvesting credentials from multiple sources — both on disk and in memory. This is a supply chain attack targeting developers who use Nx Console, meaning legitimate-looking tooling delivered the compromise. The threat is serious: credential theft enables lateral movement, privilege escalation, and ransomware deployment, and this vulnerability is already associated with known ransomware use.Wed, 27 May 2026 00:00:00 GMTNxNx Console