Malicious Nx Packages in ‘s1ngularity’ Attack Leaked 2,349 GitHub, Cloud, and AI Credentials

Source: The Hacker News | Added:

A supply chain attack has been reported involving malicious versions of the nx package and its plugins, which were published to npm. These malicious packages contained code capable of scanning the file system and collecting sensitive credentials, impacting users' security.

---

Impact: nx package, npm

In the Wild: Yes

Age: Newly disclosed

Remediation: Users are advised to remove the malicious packages and update to safe versions of the nx package.

Read Full Original Article →