s1ngularity: malicious Nx releases used AI CLIs to hunt secrets, 5,500+ private repos exposed ยท updates https://pwn.watch/i/nx-s1ngularity-npm-supply-chain-august-2025 Attackers abused a GitHub Actions injection bug in nrwl/nx to steal its npm token and published malicious nx and @nx/* versions for about four hours. The postinstall script used local AI CLIs (Claude, Gemini, Q) to find secrets and pushed them to public s1ngularity-repository repos. A second phase used stolen GitHub tokens to make 5,500+ private repos public. en Thu, 28 Aug 2025 00:00:00 GMT s1ngularity: malicious Nx releases used AI CLIs to hunt secrets, 5,500+ private repos exposed: Second phase: 5,500+ private repos of 400+ users/orgs made public with stolen tokens https://pwn.watch/i/nx-s1ngularity-npm-supply-chain-august-2025 https://pwn.watch/i/nx-s1ngularity-npm-supply-chain-august-2025#2025-08-28-4ade04cf Thu, 28 Aug 2025 00:00:00 GMT critical <p><a href="https://www.wiz.io/blog/s1ngularity-supply-chain-attack">Source</a></p> s1ngularity: malicious Nx releases used AI CLIs to hunt secrets, 5,500+ private repos exposed: GitHub disables attacker-created s1ngularity repositories (09:00 UTC) https://pwn.watch/i/nx-s1ngularity-npm-supply-chain-august-2025 https://pwn.watch/i/nx-s1ngularity-npm-supply-chain-august-2025#2025-08-27-8f2428d2 Wed, 27 Aug 2025 00:00:00 GMT critical <p><a href="https://www.wiz.io/blog/s1ngularity-supply-chain-attack">Source</a></p> s1ngularity: malicious Nx releases used AI CLIs to hunt secrets, 5,500+ private repos exposed: Malicious nx 21.5.0 and others published; npm removes them and revokes tokens that evening https://pwn.watch/i/nx-s1ngularity-npm-supply-chain-august-2025 https://pwn.watch/i/nx-s1ngularity-npm-supply-chain-august-2025#2025-08-26-5089a42e Tue, 26 Aug 2025 00:00:00 GMT critical <p><a href="https://github.com/nrwl/nx/security/advisories/GHSA-cxm3-wv7p-598c">Source</a></p> s1ngularity: malicious Nx releases used AI CLIs to hunt secrets, 5,500+ private repos exposed: Attacker exploits the workflow and exfiltrates the npm token https://pwn.watch/i/nx-s1ngularity-npm-supply-chain-august-2025 https://pwn.watch/i/nx-s1ngularity-npm-supply-chain-august-2025#2025-08-24-1f8c249e Sun, 24 Aug 2025 00:00:00 GMT critical <p><a href="https://github.com/nrwl/nx/security/advisories/GHSA-cxm3-wv7p-598c">Source</a></p> s1ngularity: malicious Nx releases used AI CLIs to hunt secrets, 5,500+ private repos exposed: A PR adds a GitHub Actions workflow with an injection bug to nrwl/nx https://pwn.watch/i/nx-s1ngularity-npm-supply-chain-august-2025 https://pwn.watch/i/nx-s1ngularity-npm-supply-chain-august-2025#2025-08-21-b645cd7f Thu, 21 Aug 2025 00:00:00 GMT critical <p><a href="https://github.com/nrwl/nx/security/advisories/GHSA-cxm3-wv7p-598c">Source</a></p>