CVE-2026-48027 affects Nx Console, a popular development tool extension. A malicious version of Nx Console was published containing embedded malicious code. The compromised extension downloaded an obfuscated payload designed to harvest credentials from multiple sources including disk storage and system memory. This represents a supply chain attack targeting developers who installed the malicious version of the extension. The vulnerability demonstrates the risks associated with third-party extensions and the potential for credential theft through compromised development tools.