Supply Chain Attack on Nx Build System Exposes Thousands of AI and Cloud Credentials

A major supply chain attack targeting the Nx build ecosystem has compromised over 2,300 GitHub, cloud service, and AI platform credentials through malicious npm package versions. The attack, discovered on August 26, 2025, exploited a vulnerable workflow to inject malicious code into multiple Nx packages.

Widespread Impact on Developer Ecosystem

The attack affected multiple versions of the Nx package and its plugins, which collectively see over 3.5 million weekly downloads. Researchers from Wiz identified that 90% of the leaked GitHub tokens remain active, with credentials exposed for major services including:

• Google AI platforms
• OpenAI systems
• Amazon Web Services
• Anthropic Claude
• PostgreSQL databases
• Datadog monitoring tools

The compromised packages contained malicious postinstall scripts that scanned systems for sensitive files and credentials, then transmitted them to public GitHub repositories under the "s1ngularity" naming pattern. This incident demonstrates how protecting sensitive business data requires constant vigilance.

Novel AI Tool Exploitation

In what security experts call a first-of-its-kind attack, the malware specifically targeted AI development tools installed on victim machines. The attackers weaponized trusted AI assistants like Claude Code, Google Gemini CLI, and Amazon Q CLI by exploiting dangerous permission flags to access file systems.

Understanding different types of malware and their attack vectors is crucial for preventing such incidents. GitGuardian's analysis revealed that 33% of compromised systems had at least one AI development tool installed, with 85% running on macOS.

Immediate Response Actions

Organizations using affected Nx packages should take immediate action:

1. Rotate all GitHub and npm credentials and tokens immediately
2. Remove malicious packages and verify .zshrc and .bashrc files
3. Enable two-factor authentication for npm publishing
4. Review AI tool permissions and disable dangerous flags
5. Audit GitHub and npm activities for suspicious behavior

For more detailed guidance on supply chain attacks, visit the CISA Supply Chain Security Resource Center.

The sophistication of this attack demonstrates the evolving nature of supply chain threats, particularly in the AI development ecosystem. Organizations must implement robust security measures and maintain constant monitoring of their development environments.