(github.com)

441 points longcat | 1 comments | 27 Aug 25 01:38 UTC | HN request time: 0s | source

See also:

Show context

ELI5, how was the malicious PR approved and merged?

Are they using AI for automated code review too?

1. danr4 ◴[27 Aug 25 14:03 UTC] No.45039871[source]▶

seems like the npm repo got hacked and the compromised version was just uploaded

Malicious versions of Nx and some supporting plugins were published