SaaSHub helps you find the best software and product alternatives Learn more →
Nx-console Alternatives
Similar projects and alternatives to nx-console
-
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
nx
The Monorepo Platform that amplifies both developers and AI agents. Nx optimizes your builds, scales your CI, and fixes failed PRs automatically. Ship in half the time.
-
-
-
-
gitpod
The developer platform for on-demand cloud development environments to create software faster and more securely.
-
-
-
vscode-remote-release
Visual Studio Code Remote Development: Open any folder in WSL, in a Docker container, or on a remote machine using SSH and take advantage of VS Code's full feature set.
-
-
-
-
-
-
-
-
nx-recipes
🧑🍳 Common recipes to productively use Nx with various technologies and in different setups. Made with ❤️ by the Nx Team
-
-
vscode-webview-ui-toolkit
Discontinued A component library for building webview-based extensions in Visual Studio Code.
-
nx-console discussion
nx-console reviews and mentions
-
The New Shape of Supply-Chain Trust
Nx Console security advisory GHSA-c9j4-9m59-847w
- Compromised Nx Console
-
GitHub confirms breach of 3,800 repos via malicious VSCode extension
Because the link is blogspam.
https://github.blog/security/investigating-unauthorized-acce... links to https://github.com/nrwl/nx-console/security/advisories/GHSA-... Nx Console
-
GitHub Compromised
If I had to guess it is the NX console extension that was compromised yesterday. But I’m not 100% sure.
https://github.com/nrwl/nx-console/security/advisories/GHSA-...
-
GitHub is investigating unauthorized access to their internal repositories
I found more details on how this particular attack worked:
https://github.com/nrwl/nx-console/issues/3148
So the extension basically rewrites files in `.github/workflows` and pushes them to GitHub, which then sends all the sensitive information to the attacker. It also attempts to plant a malware on the local machine, too.
My impression is that it would be hard for an OS-level sandbox to stop this attack. The sandbox needs to determine whether if a git push originating from an IDE is malicious.
-
NPM packages compromised, 271 antv, echarts-for-react, size-sensor, timeago
This list is incomplete - at least one other package (nx-console VS code extension) was compromised yesterday with this worm: if suitably qualified/connected people are reading this, it could be worth following that dependency chain too in case there are more. See here:
https://github.com/nrwl/nx-console/security/advisories/GHSA-...
PS: I posted on HN to try and alert people right after it was compromised but sadly got almost no upvotes :-(
- NX VS Code extension compromised again
-
Critical: Compromised Nx Console version 18.95.0
Incidentally, this is one of the first times where an LLM was genuinely useful in helping me quarantine & identify the issue with a degree of certainty.
If you want further information on how the attack was obfuscated & executed, I posted in the nx-console Issues board [here](https://github.com/nrwl/nx-console/issues/3140) - (apols for the LLM-assisted post, as you would imagine I was in something of a hurry to report it)
-
Show HN: Tips to stay safe from NPM supply chain attacks
These tips are great, but they don’t address some of the core ways that these supply chain attacks may happen: global modules and npm modules installed with editor extensions.
So `yarn global add nx` will still install the latest version by default, unless you specifically have a `~/.yarnrc` disallowing lifecycle scripts they will still be executed. Using a package manager that doesn’t allow lifecycle scripts by default is the solution here I guess.
I don’t know what the solution is for stuff like [this](https://github.com/nrwl/nx-console/blob/d2fa56509679fc942bbc...) where the editor plugin automatically uses the latest version, or where in general you have little control over what version is used. Any eslint, typescript, nx, prettier, etc plugin will presumably depend on their corresponding package from npm, and if any of those gets compromised then just installing an editor extension could be enough to get you in trouble.
-
Nx Console gets Lit
💡 Properly typing mixins is complicated so I left that part out. Refer to Mixins in Typescript to learn more or check out our source code on GitHub.
-
A note from our sponsor - SaaSHub
www.saashub.com | 16 Jun 2026
Stats
nrwl/nx-console is an open source project licensed under MIT License which is an OSI approved license.
The primary programming language of nx-console is TypeScript.