On: Malicious versions of Nx and some supporting plugins were published

[sneak]

Furthermore most people have probably granted the node binary access to everything in their home directory on macOS. Other processes would pop up a permission dialog.