AI-powered malware hit 2,180 GitHub accounts in "s1ngularity" attack
· Source: bleepingcomputer.com
In short
A sophisticated AI-powered malware attack called 's1ngularity' compromised 2,180 GitHub accounts and exposed 7,200 repositories through the Nx build system. The malware used command-line AI tools like Claude, Q, and Gemini with specially crafted LLM prompts to search for and steal sensitive credentials and secrets. The attack unfolded in three distinct phases between August 26-31, 2025, resulting in significant data exposure with many leaked secrets remaining valid.
Read Original Article — Read the full article on the publisher’s site.
In the issue of week 36, 2025: AI-Driven Trade Intelligence and Security Redefine Global Supply Chains
Tags: security, supply-chain, automation, malware, github, npm