Nx s1ngularity npm compromise harvests developer secrets with AI CLIs
Malicious versions of the Nx build system and some plugins were published to npm on August 26, 2025. The Nx advisory traced the root cause to a GitHub Actions workflow open to code injection. The post-install payload collected GitHub tokens, npm config, SSH keys and wallet files, prompted installed AI command-line tools to hunt for more secrets, and uploaded the results to public repositories named s1ngularity-repository in victims' own GitHub accounts.
- Victim
- Multiple: developers and organizations installing malicious Nx versions
- Industry
- Technology
- Country
- Global
- Intrusion began
- Aug 26, 2025
- First disclosed
- Aug 26, 2025
- Actor
- Unattributed
- Initial access
- Supply chain
- Identity control that failed
- Credential storage
- MFA
- Not applicable (no interactive login)
- Abused identity
- Non-human (service account, token, key or app)
- Records affected
- Not disclosed
- Disclosed cost
- Not disclosed
The identity lesson
Developer workstations held long-lived GitHub and npm tokens that a post-install script could read. Short-lived, scoped publishing credentials such as trusted publishing, and keeping tokens out of plaintext config, reduce what a poisoned package can take.
Go deeper on SWI
- Technique: Secrets in repositories and CI
Sources
- Malicious versions of Nx and some supporting plugins were published, Nx (GitHub security advisory), Aug 27, 2025
- s1ngularity: supply chain attack leaks secrets on GitHub: everything you need to know, Wiz, Aug 27, 2025
Record verified Oct 31, 2026 against the sources above. Corrections: contact us.
Related incidents
- Shai-Hulud 2.0 npm worm exposes credentials in 25,000+ repositories 2025 · Supply chain
- Shai-Hulud self-replicating npm worm steals maintainer tokens 2025 · Supply chain
- tj-actions/changed-files GitHub Action compromise leaks CI secrets 2025 · Supply chain
- GhostAction returns: hijacked GitHub accounts push secret-stealing workflows 2026 · Stolen credentials
Cite this record
SWI Community Team. (2026). Nx s1ngularity npm compromise harvests developer secrets with AI CLIs. Identity Breach Database, Start with Identity. https://startwithidentity.com/breaches/incidents/2025-nx-s1ngularity-npm-compromise/
Part of the Identity Breach Database, free to reuse under CC BY 4.0. Analysis across every record: Identity Breach Report 2026.