Nx

s1ngularity: malicious Nx npm releases used AI CLIs to hunt and leak developer secrets

Malicious versions of the Nx build system were published to npm after attackers abused a flawed GitHub Actions workflow; the payload used installed AI command-line tools such as Claude, Gemini and Q to search for secrets and posted them to public repos in victims' GitHub accounts. Leaked tokens were then used to make over 5,500 private repositories public across more than 400 users and organizations.