Skip to content

Comment on Nx compromised: malware uses Claude code CLI to explore the filesystemparent

Comments

Hi! Author here who added the VSCode stat :)

I thought it was useful to include because:

* it can inform triage, if you use the extension you're more likely to be impacted * because it was VSCode, Workplace Trust actually partially mitigated this in at least 38 cases

The vocoder extension does not contain any affected packages, it‘s just misleading

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.