Socket on Mythryl: “🚨 Supply chain attack on Nx npm packages (4.6M weekly downloads)…”

🚨 Supply chain attack on Nx npm packages (4.6M weekly downloads) Malware abused AI CLI tools (Claude, Gemini, Q) to steal creds + wallets, then exfiltrated to GitHub repos (s1ngularity-repository*). More than 1,000 victim accounts confirmed. 🔗 socket.dev/blog/nx-pack... #nodejs

socket.devNx npm Packages Compromised in Supply Chain Attack Leveragin...Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malwa...

27/8/25, 4:15 pm14 reposts22 likes

Post