Malicious Nx Packages in ‘s1ngularity’ Attack Leaked 2,349 GitHub, Cloud, and AI Credentials

The nx build system maintainers have warned users about a supply chain attack that resulted in the release of malicious versions of the nx npm package and related plugins, which were designed to gather data by scanning the file system and collecting credentials. Users are advised to take precautions and check their dependencies to ensure they are not using these compromised packages.

Want More Context? 🔎