Attacks on the NX build system and React packages highlight escalating threats to enterprise software development pipelines.

On August 26, 2025, Nx, the popular build platform with millions of weekly downloads, was compromised with ...

Nx supply chain attack on Aug 26, 2025 leaked 2,349 secrets via npm packages, risking GitHub and cloud accounts.

A software supply chain attack targeting Nx marks the first known case where attackers have leveraged developer AI assistants ...

The details are transmitted to a threat actor-controlled Telegram bot named "@sshZXC_bot" (ssh_bot) via the API, which then acknowledges the receipt of the credentials. The messages are sent through ...

Nx is the latest target of a software supply chain attack in the NPM ecosystem, with multiple malicious versions being ...

The popular Nx build system, boasting 4 million downloads each week, was exploited in the first supply chain breach to use AI ...

A malicious Go module disguises itself as a brute force tool for SSH, but secretly steals the credentials it finds and ...

At the same time, security researchers Wiz released a separate announcement, saying the malicious versions were carrying infostealing malware, grabbing secrets such as GitHub and NPM tokens, SSH keys, ...

In addition to GitHub Pro, you’ll also get GitHub Copilot Pro for free. This gives you 300 premium requests per month, access ...