Popular Nx Build System NPM Package Compromised with Data Stealing Malware (opens in new tab)

(stepsecurity.io)

10 pointsvarunsharma077mo ago2 comments

2 comments

dang7mo ago

Related ongoing thread:

Malicious versions of Nx and some supporting plugins were published - https://news.ycombinator.com/item?id=45034496 - Aug 2025 (227 comments)

varunsharma07OP7mo ago

Nx package on npm hijacked to steal cryptocurrency wallets, GitHub/npm tokens, SSH keys, and environment secrets through sophisticated exfiltration attack

j / k navigate · click thread line to collapse

2 comments

dang7mo ago

Related ongoing thread:

Malicious versions of Nx and some supporting plugins were published - https://news.ycombinator.com/item?id=45034496 - Aug 2025 (227 comments)

varunsharma07OP7mo ago

Nx package on npm hijacked to steal cryptocurrency wallets, GitHub/npm tokens, SSH keys, and environment secrets through sophisticated exfiltration attack

j / k navigate · click thread line to collapse