▲ 5 ▼ Malicious versions of Nx and some supporting plugins were published (github.com) submitted 1 year ago by digicat@infosec.pub to c/blueteamsec@infosec.pub comment fedilink hide all child comments https://semgrep.dev/blog/2025/security-alert-nx-compromised-to-steal-wallets-and-credentials/
▲ 21 ▼ Vulnerable Claude code in GitHub action led to stolen NPM keys (github.com) submitted 1 year ago by qqq@lemmy.world to c/programming@programming.dev 2 comments fedilink hide all child comments Seems like a ton (over 1k) of people were affected because of an auto updating VS Code extension. Check your bashrc/zshrc and GitHub account if you use nx