2nd Wave of Nx Attack: Private GitHub Repos Are Being Made Public
Posted4 months agoActive4 months ago
Original: Tell HN: 2nd wave of Nx attack: private GitHub repos are being made public
Securitystory
heatednegative
Debate
80/100
GithubOnline SafetySupply Chain Attack
Key topics
Github
Online Safety
Supply Chain Attack
It appears as though the attackers behind the Nx supply chain attack on Wednesday are now using leaked GitHub tokens to make private GitHub repositories public (and renaming them to s1ngularity-repository-XXXXX in the process). 7.2k repositories affected at time of writing.
https://xcancel.com/adnanthekhan/status/1961152614055207039
Discussion Activity
Light discussionFirst comment
6m
Peak period
1
0-1h
Avg / period
1
Key moments
- 01Story posted
Aug 28, 2025 at 10:52 PM EDT
4 months ago
Step 01 - 02First comment
Aug 28, 2025 at 10:58 PM EDT
6m after posting
Step 02 - 03Peak activity
1 comments in 0-1h
Hottest window of the conversation
Step 03 - 04Latest activity
Aug 28, 2025 at 10:58 PM EDT
4 months ago
Step 04
Generating AI Summary...
Analyzing up to 500 comments to identify key contributors and discussion patterns
Discussion (1 comments)
Showing 1 comments
fennec-posix
4 months ago
yeah, just did a search on github, ouch. This looks bad.
View full discussion on Hacker News
ID: 45059583Type: storyLast synced: 11/18/2025, 12:14:30 AM
Want the full context?
Jump to the original sources
Read the primary article or dive into the live Hacker News thread when you're ready.