(github.com)

441 points longcat | 1 comments | 27 Aug 25 01:38 UTC | HN request time: 0.222s | source

See also:

https://www.stepsecurity.io/blog/supply-chain-security-alert...

https://semgrep.dev/blog/2025/security-alert-nx-compromised-...

1. alex_anglin ◴[27 Aug 25 15:06 UTC] No.45040743[source]▶

Pretty rich that between this and Claude for Chrome, Anthropic just posted a ~40m YouTube video touting "How Anthropic stops AI cybercrime": https://www.youtube.com/watch?v=EsCNkDrIGCw

↑

Malicious versions of Nx and some supporting plugins were published