#s1ngularity — Public Fediverse posts

TLDR recent #npm supply chain attacks

🗓️ 26 Aug: #nx packages compromised stealing SSH keys, npm tokens, and .gitconfig files and weaponized AI CLI tools 😱 upload to repo named #S1ngularity
HackerNews: https://news.ycombinator.com/item?id=45034496
GHSA-cxm3-wv7p-598c: https://github.com/nrwl/nx/security/advisories/GHSA-cxm3-wv7p-598c

🗓️ 8 Sep: #chalk, #debugjs and other packages by maintainer #qix (junon) compromised. They handled this very transparently 👍️
See
HackerNews: https://news.ycombinator.com/item?id=45169794
CVE-2025-59144: https://github.com/advisories/GHSA-4x49-vf9v-38px

Over 6,700 Private Repositories Made Public in Nx Supply Chain Attack – Source: www.securityweek.com https://ciso2ciso.com/over-6700-private-repositories-made-public-in-nx-supply-chain-attack-source-www-securityweek-com/ #rssfeedpostgeneratorecho #SupplyChainSecurity #CyberSecurityNews #securityweekcom #secretssprawl #securityweek #S1ngularity #supplychain #GitHub

Over 6,700 Private Repositories Made Public in Nx Supply Chain Attack – Source: www.securityweek.com https://ciso2ciso.com/over-6700-private-repositories-made-public-in-nx-supply-chain-attack-source-www-securityweek-com/ #rssfeedpostgeneratorecho #SupplyChainSecurity #CyberSecurityNews #securityweekcom #secretssprawl #securityweek #S1ngularity #supplychain #GitHub

Over 6,700 Private Repositories Made Public in Nx Supply Chain Attack – Source: www.securityweek.com https://ciso2ciso.com/over-6700-private-repositories-made-public-in-nx-supply-chain-attack-source-www-securityweek-com/ #rssfeedpostgeneratorecho #SupplyChainSecurity #CyberSecurityNews #securityweekcom #secretssprawl #securityweek #S1ngularity #supplychain #GitHub

Over 6,700 Private Repositories Made Public in Nx Supply Chain Attack – Source: www.securityweek.com https://ciso2ciso.com/over-6700-private-repositories-made-public-in-nx-supply-chain-attack-source-www-securityweek-com/ #rssfeedpostgeneratorecho #SupplyChainSecurity #CyberSecurityNews #securityweekcom #secretssprawl #securityweek #S1ngularity #supplychain #GitHub

Over 6,700 Private Repositories Made Public in Nx Supply Chain Attack https://www.securityweek.com/over-6700-private-repositories-made-public-in-nx-supply-chain-attack/ #SupplyChainSecurity #secretssprawl #S1ngularity #SupplyChain #GitHub

Over 6,700 Private Repositories Made Public in Nx Supply Chain Attack https://www.securityweek.com/over-6700-private-repositories-made-public-in-nx-supply-chain-attack/ #SupplyChainSecurity #secretssprawl #S1ngularity #SupplyChain #GitHub

すばらしい
---
Nx の攻撃から学べること #s1ngularity | blog.jxck.io
https://blog.jxck.io/entries/2025-09-03/nx-incidents.html
#bookmarks

Nx の攻撃から学べること #s1ngularity | blog.jxck.io
blog.jxck.io/entries/2025-09-03/nx-incidents.html

Thousands of Developer Credentials Stolen in macOS “s1ngularity” Attack – Source:hackread.com https://ciso2ciso.com/thousands-of-developer-credentials-stolen-in-macos-s1ngularity-attack-sourcehackread-com/ #1CyberSecurityNewsPost #CyberSecurityNews #cybersecurity #CyberAttacks #CyberAttack #S1ngularity #SupplyChain #DataBreach #Hackread #security #GitHub #Apple #macOS #NPM

Thousands of Developer Credentials Stolen in macOS “s1ngularity” Attack https://hackread.com/developer-credentials-stolen-macos-s1ngularity-attack/ #Cybersecurity #CyberAttacks #CyberAttack #S1ngularity #SupplyChain #databreach #Security #GitHub #Apple #macOS #NPM

🚨 Thousands of developer credentials stolen in the macOS #s1ngularity Nx supply chain attack. Targets included GitHub, npm, SSH, and AI tool keys. Update + revoke now.

Read: https://hackread.com/developer-credentials-stolen-macos-s1ngularity-attack/

#CyberSecurity #CyberAttack #InfoSec #macOS #GitHub