Popular Nx Build System NPM Package Compromised with Data Stealing Malware

stepsecurity.io

Related ongoing thread:

Malicious versions of Nx and some supporting plugins were published - https://news.ycombinator.com/item?id=45034496 - Aug 2025 (227 comments)

Nx package on npm hijacked to steal cryptocurrency wallets, GitHub/npm tokens, SSH keys, and environment secrets through sophisticated exfiltration attack

Reply on news.ycombinator.com