Attacks on the NX build system and React packages highlight escalating threats to enterprise software development pipelines.

VS Code flaw lets attackers reuse deleted extension names, enabling ransomware payload delivery and supply chain risks.