// day
May 27, 2026
2 new incidents, 0 with updates.
## started
- highclosedpatchedclosed May 27, 2026
Nx Nx Console: Nx Console Embedded Malicious Code Vulnerability
› Nx Nx Console
Nx Console contains an embedded malicious code vulnerability that allowed a malicious version of Nx Console to be published. The compromised extension fetched an obfuscated payload that could harvested credentials from multiple sources on disk and in memory. Added to CISA KEV on 2026-05-27.
CVE-2026-48027 - highclosedpatchedclosed May 27, 2026
TanStack TanStack: TanStack Unspecified Vulnerability
› TanStack TanStack
TanStack contains an unspecified vulnerability that allowed malicious versions of the product to be published to the npm registry to publish credential-stealing malware under a trusted identity. Added to CISA KEV on 2026-05-27.
CVE-2026-45321