nx compromise
Named by 2 kept items in this workspace.
Search every workspace for nx compromise. It matches the name as written, so it can find other things that share it.
The items that name it 2
August 2025; postinstall payload tried to use locally installed AI tools to scan for credentials; started with a workflow injection that leaked the npm publishing token
Recent npm supply chain attack cited as proving how quickly a compromised account can poison the ecosystem
All threat actors in this workspace.