pwn.watch: Nx incident updates https://pwn.watch/t/nx Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Thu, 22 Oct 2026 16:42:01 GMT [high] Nx Nx Console: Nx Console Embedded Malicious Code Vulnerability: CISA added CVE-2026-48027 to the KEV catalog (due 2026-06-10). https://pwn.watch/i/nx-nx-console-cve-2026-48027 nx-nx-console-cve-2026-48027:2026-05-27:CISA added CVE-2026-48027 to the KEV catalog (due 2026-06-10). Wed, 27 May 2026 00:00:00 GMT high Status: closed, patched [critical] s1ngularity: malicious Nx releases used AI CLIs to hunt secrets, 5,500+ private repos exposed: Second phase: 5,500+ private repos of 400+ users/orgs made public with stolen tokens https://pwn.watch/i/nx-s1ngularity-npm-supply-chain-august-2025 nx-s1ngularity-npm-supply-chain-august-2025:2025-08-28/29:Second phase: 5,500+ private repos of 400+ users/orgs made public with stolen tokens Thu, 28 Aug 2025 00:00:00 GMT critical Source: https://www.wiz.io/blog/s1ngularity-supply-chain-attack Status: closed, patched [critical] s1ngularity: malicious Nx releases used AI CLIs to hunt secrets, 5,500+ private repos exposed: GitHub disables attacker-created s1ngularity repositories (09:00 UTC) https://pwn.watch/i/nx-s1ngularity-npm-supply-chain-august-2025 nx-s1ngularity-npm-supply-chain-august-2025:2025-08-27:GitHub disables attacker-created s1ngularity repositories (09:00 UTC) Wed, 27 Aug 2025 00:00:00 GMT critical Source: https://www.wiz.io/blog/s1ngularity-supply-chain-attack Status: closed, patched [critical] s1ngularity: malicious Nx releases used AI CLIs to hunt secrets, 5,500+ private repos exposed: Malicious nx 21.5.0 and others published; npm removes them and revokes tokens that evening https://pwn.watch/i/nx-s1ngularity-npm-supply-chain-august-2025 nx-s1ngularity-npm-supply-chain-august-2025:2025-08-26:Malicious nx 21.5.0 and others published; npm removes them and revokes tokens that evening Tue, 26 Aug 2025 00:00:00 GMT critical Source: https://github.com/nrwl/nx/security/advisories/GHSA-cxm3-wv7p-598c Status: closed, patched [critical] s1ngularity: malicious Nx releases used AI CLIs to hunt secrets, 5,500+ private repos exposed: Attacker exploits the workflow and exfiltrates the npm token https://pwn.watch/i/nx-s1ngularity-npm-supply-chain-august-2025 nx-s1ngularity-npm-supply-chain-august-2025:2025-08-24:Attacker exploits the workflow and exfiltrates the npm token Sun, 24 Aug 2025 00:00:00 GMT critical Source: https://github.com/nrwl/nx/security/advisories/GHSA-cxm3-wv7p-598c Status: closed, patched [critical] s1ngularity: malicious Nx releases used AI CLIs to hunt secrets, 5,500+ private repos exposed: A PR adds a GitHub Actions workflow with an injection bug to nrwl/nx https://pwn.watch/i/nx-s1ngularity-npm-supply-chain-august-2025 nx-s1ngularity-npm-supply-chain-august-2025:2025-08-21:A PR adds a GitHub Actions workflow with an injection bug to nrwl/nx Thu, 21 Aug 2025 00:00:00 GMT critical Source: https://github.com/nrwl/nx/security/advisories/GHSA-cxm3-wv7p-598c Status: closed, patched