Popular Nx Build System NPM Package Compromised with Data Stealing Malware (stepsecurity.io) 10 points by varunsharma07 1y ago ↗ HN
[–] varunsharma07 1y ago ↗ Nx package on npm hijacked to steal cryptocurrency wallets, GitHub/npm tokens, SSH keys, and environment secrets through sophisticated exfiltration attack
[–] dang 1y ago ↗ Related ongoing thread:Malicious versions of Nx and some supporting plugins were published - https://news.ycombinator.com/item?id=45034496 - Aug 2025 (227 comments)
2 comments
[ 3.5 ms ] story [ 19.4 ms ] threadMalicious versions of Nx and some supporting plugins were published - https://news.ycombinator.com/item?id=45034496 - Aug 2025 (227 comments)