At the same time, security researchers Wiz released a separate announcement, saying the malicious versions were carrying infostealing malware, grabbing secrets such as GitHub and NPM tokens, SSH keys, ...

The popular Nx build system, boasting 4 million downloads each week, was exploited in the first supply chain breach to use AI assistants.

Attacks on the NX build system and React packages highlight escalating threats to enterprise software development pipelines.

Nx is the latest target of a software supply chain attack in the NPM ecosystem, with multiple malicious versions being ...

A software supply chain attack targeting Nx marks the first known case where attackers have leveraged developer AI assistants, according to StepSecurity ...