←back to thread

Malicious versions of Nx and some supporting plugins were published

(github.com)
441 points longcat | 1 comments | 27 Aug 25 01:38 UTC | HN request time: 0.236s | source
1. nodesocket ◴[28 Aug 25 00:48 UTC] No.45047049[source]▶
Interesting they create a public repo in your GitHub to store the payload. I would have thought would be better and less obvious to just upload the payload to a server they control.