🕵️ s1ngularity

The items that name it 15

• Binance’s $6.3 Billion Hack Puts Developer Machine Security in Focus
  articleas classification.key entities2026-10-30
• StepSecurity Now Inventories AI Agent Skills in Your GitHub Repositories and on Developer Machines
  articleas classification.key entities2026-10-08
• | Blog | Endor Labs
  articleas classification.key entities2026-10-06
• Package Manager Sandboxing (Andrew Nesbitt)
  articleas classification.key entities2026-09-24
• Why Cooldown Windows Belong in Every npm Security Strategy | Blog | Endor Labs
  articleas classification.key entities2026-09-11
• Good riddance, TeamPCP. Now for the hard part.
  articleas classification.key entities2026-08-27
• Shai-Hulud was the best thing to happen to supply chain security
  articleas threat actors2026-08-24

  Aug 26, 2025 attack exploiting a GitHub Actions misconfiguration in the Nx monorepo to execute code from a malicious fork in the upstream repo's trusted context, stealing the npm publishing token; malicious Nx package versions live for four hours, scanned developer machines for credentials, SSH keys

• Introducing the Wiz Sensor for Developer Workstations to Protect Endpoints in the AI Era
  articleas threat actors2026-08-03

  Compromised multiple versions of the Nx build system and its VS Code extension; a postinstall script harvested GitHub tokens, npm credentials, SSH keys, and cloud credentials, then weaponized AI CLI tools already on the machine (including Claude and Gemini) to exfiltrate filesystem contents. Over 1,

• How Aikido Intel detects malware and vulnerabilities first
  articleas classification.key entities2026-07-13
• The OpenSourceMalware Show #9
  talkas classification.key entities2026-06-18
• Dev Machine Guard Now Scans Extensions Across Every Modern IDE
  articleas classification.key entities2026-06-02
• JFrog: The Governance Gap Between Your Policy and Your Pipeline
  articleas classification.key entities2026-05-21
• Cooldowns.dev
  articleas classification.key entities2026-05-06
• Dev Machine Guard Now Supports Linux - StepSecurity
  articleas threat actors

  Nx compromise that weaponized AI CLI tools on developer machines (mostly Linux and macOS) to exfiltrate credentials

• Dev Machine Guard Now Supports Windows - StepSecurity
  articleas threat actorsIt is written here as s1ngularity (Nx compromise).

  Compromise that weaponized AI CLI tools on developer machines to exfiltrate credentials; tracked by StepSecurity's research team in the last twelve months