Aug 28, 2025

Updated

• Closed✓Patched

  s1ngularity: malicious Nx releases used AI CLIs to hunt secrets, 5,500+ private repos exposed

  Attackers abused a GitHub Actions injection bug in nrwl/nx to steal its npm token and published malicious nx and @nx/* versions for about four hours. The postinstall script used local AI CLIs (Claude, Gemini, Q) to find secrets and pushed them to public s1ngularity-repository repos. A second phase used stolen GitHub tokens to make 5,500+ private repos public.

  nx and @nx/* npm packages·Closed Aug 29, 2025·updated Aug 29, 2025