FeedBagel

All Topics

Art

Weaponizing AI Coding Agents for Malware in the Nx Malicious Package Security Incident

10mo agoen

programming

Source

SnykWeaponizing AI Coding Agents for Malware in the Nx Malicious Package Security Incidentsnyk.io

Snippet from the RSS feed

On August 26–27, 2025 (UTC), eight malicious Nx and Nx Powerpack releases were pushed to npm across two version lines and were live for ~5 hours 20 minutes before removal.

You might also wanna read

317 npm Packages Compromised in Mini Shai-Hulud Supply Chain Attack

A major npm supply chain attack occurred on May 19, 2026, when the npm account of maintainer "atool" was compromised. The attacker published

safedep.io·1mo ago

Popular npm packages debug and chalk compromised with crypto-intercepting malware

Starting September 8th, 2023, the popular npm packages "debug" and "chalk" were compromised with malicious code. These packages, which colle

aikido.dev·10mo ago

Security Alert: Malicious Nx Packages Published to npm Containing Credential-Stealing Code

Malicious versions of the Nx package and several supporting plugins were published to npm, containing code that scans file systems, collects

github.com·10mo ago

September 2025 NPM supply-chain attack compromises popular JavaScript packages

In September 2025, a coordinated software supply-chain attack targeted multiple popular NPM packages in the JavaScript ecosystem. The attack

projectptixiakis.github.io·1mo ago

NPM Package Author "qix" Compromised in Ongoing Supply Chain Phishing Attack

This article discusses the ongoing issue of phishing attacks targeting NPM package authors, specifically focusing on a compromised author na

github.com·10mo ago

Major NPM Supply Chain Attack: Over 1,000 Packages Infected via Fake Bun Runtime

A major cybersecurity incident occurred where over 1,000 NPM packages and 27,000+ GitHub repositories were infected within hours via a fake

helixguard.ai·7mo ago

Comments

No comments yet. Be the first.