Malicious versions of Nx and some supporting plugins were published

That's why I find the cynicism about vibe coding to be ironic.

"It's dangerous to just deploy code that you didn't write and you haven't verified!"

....