s1ngularity: supply chain attack in Nx packages

T1Covered by 1 source · first reported by Vercel (blog + changelog) at 27 Aug 2025, 13:00 UTC

Threat actors published modified versions of the Nx package and some of its supporting libraries to the npm registry with the goal of exfiltrating developer and service credentials. Builds on Vercel are safe from this vulnerability by default. Visit the GitHub advisory to check if your local or…