Popular Nx Build System NPM Package Compromised with Data Stealing Malware
stepsecurity.ioRelated ongoing thread:
Malicious versions of Nx and some supporting plugins were published - https://news.ycombinator.com/item?id=45034496 - Aug 2025 (227 comments)
Nx package on npm hijacked to steal cryptocurrency wallets, GitHub/npm tokens, SSH keys, and environment secrets through sophisticated exfiltration attack