AIDocker Blogabout 1 hour ago
Nx Supply Chain Attack Uses AI Agents to Steal Credentials
13 min read
Malicious Nx packages published to npm on August 26, 2025, used a post-install hook to scan for installed AI coding agents and invoked them with permission-bypass flags to enumerate credentials. The s1ngularity campaign targeted Claude, Gemini, and Q CLIs on macOS and Linux machines.
Level
Hype check
Tap to vote and see what everyone thinks.
