Malicious Nx Packages in 's1ngularity' Attack Leaked 2,349 GitHub, Cloud, and AI Credentials
· Source: thehackernews.com
In short
A supply chain attack on the nx build system involved malicious npm packages that exfiltrated credentials from developer machines. The attack leveraged a vulnerable GitHub workflow to inject code, collecting GitHub tokens, cloud credentials, and AI API keys. Over 2,300 distinct secrets were leaked, including those from Google AI, OpenAI, and AWS.
Read Original Article — Read the full article on the publisher’s site.
In the issue of week 35, 2025: AI-Powered Supply Chains Drive Resilience Amid Geopolitical Shifts
Tags: security, supply-chain, automation, credentials, AI, developers