Popular Nx Build System Npm Package Compromised with Data Stealing Malware

Posted4 months agoActive4 months ago

varunsharma07

10 points

2 comments

stepsecurity.ioSecuritystory

informativenegative

Debate

20/100

Data_securityNpm_package_securityData_exfiltration

Key topics

Data_security

Npm_package_security

Data_exfiltration

Discussion Activity

Light discussion

First comment

N/A

Peak period

0-1h

Avg / period

Key moments

01Story posted
Aug 26, 2025 at 11:19 PM EDT
4 months ago
Step 01
02First comment
Aug 26, 2025 at 11:19 PM EDT
0s after posting
Step 02
03Peak activity
1 comments in 0-1h
Hottest window of the conversation
Step 03
04Latest activity
Aug 27, 2025 at 1:56 PM EDT
4 months ago
Step 04

Generating AI Summary...

Analyzing up to 500 comments to identify key contributors and discussion patterns

Discussion (2 comments)

Showing 2 comments

varunsharma07Author

4 months ago

Nx package on npm hijacked to steal cryptocurrency wallets, GitHub/npm tokens, SSH keys, and environment secrets through sophisticated exfiltration attack

dang

4 months ago

Related ongoing thread:

Malicious versions of Nx and some supporting plugins were published - https://news.ycombinator.com/item?id=45034496 - Aug 2025 (227 comments)

View full discussion on Hacker News

ID: 45035115Type: storyLast synced: 11/20/2025, 11:53:21 AM

Want the full context?

Jump to the original sources

Read the primary article or dive into the live Hacker News thread when you're ready.

Open link View on HN