Vulnerability	Vulnerable Version
C Embeded Malicious Code nx is a The core Nx plugin contains the core functionality of Nx like the project graph, nx commands and task orchestration. Affected versions of this package are vulnerable to Embeded Malicious Code through a malicious postinstall script that triggers a file named `telemetry.js`. A malicious actor compromised the credentials of one of the maintainers, which allowed the attacker to publish tampered versions of the package to npm. How to fix Embeded Malicious Code? Avoid using all malicious instances of the `nx` package.	>=21.5.0 <=21.8.0>=20.9.0 <=20.12.0

Embeded Malicious Code

nx is a The core Nx plugin contains the core functionality of Nx like the project graph, nx commands and task orchestration.

Affected versions of this package are vulnerable to Embeded Malicious Code through a malicious postinstall script that triggers a file named telemetry.js. A malicious actor compromised the credentials of one of the maintainers, which allowed the attacker to publish tampered versions of the package to npm.

How to fix Embeded Malicious Code?

Avoid using all malicious instances of the nx package.

>=21.5.0 <=21.8.0>=20.9.0 <=20.12.0

Go back to all versions of this package