🧰 Nx

The items that name it 10

• StepSecurity Now Inventories AI Agent Skills in Your GitHub Repositories and on Developer Machines
  articleas affected products2026-10-08

  Package targeted in the s1ngularity attack, the first documented malware turning AI CLI tools into reconnaissance/exfiltration agents.

• Why Cooldown Windows Belong in Every npm Security Strategy | Blog | Endor Labs
  articleas affected products2026-09-11

  target of the s1ngularity attack

• Introducing the Wiz Sensor for Developer Workstations to Protect Endpoints in the AI Era
  articleas classification.technologies2026-08-03
• npm v12 delivers one of the biggest security improvements in years
  articleas affected products2026-06-11

  Compromised via stolen publish token; postinstall script telemetry.js harvested credentials.

• The Pros and Cons of NPM v12's Security Improvements
  articleas affected products2026-06-10

  Popular package using lifecycle install scripts; 9 million weekly downloads

• VSCode Lifecycle Script Malware
  writeupas affected products2026-05-16
• The complete GitHub Actions security checklist
  articleas affected products2026-05-11

  Project affected by the s1ngularity attack combining script injection and pull_request_target, leaking a GITHUB_TOKEN used to publish malicious npm packages.

• Cooldowns.dev
  articleas affected products2026-05-06It is written here as Nx (npm).

  npm

• Dev Machine Guard Now Supports Linux - StepSecurity
  articleas affected products

  compromised via s1ngularity attack using AI CLI tools

• Dev Machine Guard Now Supports Windows - StepSecurity
  articleas affected products