Malicious Nx Packages in 's1ngularity' Attack Leaked 2,349 GitHub, Cloud, and AI Credentials
Malicious nx and supporting plugins were published to npm, containing code that harvested credentials, scanned file systems, and exfiltrated data to GitHub repositories.