Malicious nx and Nx plugin versions published to npm collected credentials, per Nx

Summary

Nx advisory GHSA-cxm3-wv7p-598c (CVE-2025-10894, critical): malicious versions of nx (e.g. 21.5.0) and plugin packages were published to npm. Nx says the code scanned the file system, collected credentials and posted them to GitHub as a repository (s1ngularity-repository) under users' accounts, and appended "sudo shutdown -h 0" to .zshrc and .bashrc.

Techniques

Technique-level mapping, an editorial judgment made by the method.

• T1195.002 Compromise Software Supply Chain
• T1552.001 Credentials In Files
• T1567 Exfiltration Over Web Service

MITRE ATT&CK technique IDs and names: © The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. ATT&CK terms of use

Controls

Controls that could prevent, detect, or support recovery from this kind of failure. Mappings are editorial judgments made by the method, not findings about what any party should have done.

NIST AI RMF

Not mapped. AI RMF mapping is optional for cyber incidents.

NIST SP 800-53

• SR-3 Supply Chain Controls and Processes
• SR-4 Provenance
• IA-5 Authenticator Management
• SI-7 Software, Firmware, and Information Integrity

Human-approval (JCR) checkpoint

not applicable

Correlated incidents

Co-occurrence, not cause: each link records something the two incidents share, as its rationale and source state. It does not say one incident caused the other. Links are written on one record; the other record shows the same link marked derived.

• AI AIA-008 Malicious Nx npm packages included a prompt for an AI "file-search agent", per Nx

  same CVE

  AIA-008 and this record cite the same Nx advisory, GHSA-cxm3-wv7p-598c, tracked as CVE-2025-10894.

  Source: github.com https://github.com/nrwl/nx/security/advisories/GHSA-cxm3-wv7p-598c

• AI AIA-008 Malicious Nx npm packages included a prompt for an AI "file-search agent", per Nx

  AI used in attack

  Nx's advisory says the malicious script contained a prompt beginning "You are a file-search agent", the AI-agent part of this event recorded in AIA-008.

  Source: github.com https://github.com/nrwl/nx/security/advisories/GHSA-cxm3-wv7p-598c

• AI AIA-005 Malicious code shipped in Amazon Q Developer VS Code extension 1.84.0, per AWS

  same technique

  Both are supply-chain compromises in which malicious code shipped in a published developer package release: nx versions on npm, per Nx, and Amazon Q Developer extension 1.84.0, per AWS.

  Source: aws.amazon.com https://aws.amazon.com/security/security-bulletins/AWS-2025-015/

Sources

• github.com primary link checked 2026-10-31, HTTP 200
  Published Aug 27, 2025; rated Critical. The script contained a prompt beginning "You are a file-search agent".
  https://github.com/nrwl/nx/security/advisories/GHSA-cxm3-wv7p-598c

Corrections

No corrections recorded.

To report an error in this entry, see corrections.