Nx s1ngularity

Named by 2 kept items in this workspace.

Search every workspace for Nx s1ngularity. It matches the name as written, so it can find other things that share it.

The items that name it 2

npm Now Scans for Malware at Publish, Not Install | Blog | Endor Labs
article2026-08-12
Campaign that poisoned packages pulled automatically by AI coding agents
npm v12 delivers one of the biggest security improvements in years
article2026-06-11
August 2025. A stolen publish token pushed malicious Nx versions whose postinstall script, telemetry.js, ran on install. It scraped GitHub tokens, npm credentials, SSH keys, and crypto wallets, then uploaded them to public GitHub repos. Harvested roughly 2,300 credentials that seeded future attacks.

All threat actors in this workspace.