Malicious Nx npm Packages Reportedly Weaponize AI Coding Agents for Data Exfiltration
Description
Malicious versions of the popular Nx monorepo tool and plugins were reportedly published to npm after attackers compromised its CI workflow. The malware's postinstall script reportedly harvested credentials and exfiltrated data, reportedly weaponizing local AI coding agents such as Claude Code, Gemini, and Amazon q. By invoking unsafe flags, it allegedly coerced the tools into scanning developer machines for sensitive files, marking one of the first known AI-assisted supply chain attacks.
Actors
Alleged Deployers
- malicious-actors-compromising-nx's-cicd-pipeline-and-publishing-tainted-npm-packages
Alleged Developers
- anthropic
- amazon
Harmed Parties
- nx-users-and-organizations-installing-compromised-npm-packages
Classification
Risk Domain
Privacy & SecurityRisk Subdomain
2.2. AI system security vulnerabilities and attacks
MIT Risk Profile
Topics
Source
Related Incidents (Privacy & Security)
View all →Research Papers on This Topic
View all →StarCoder: may the source be with you!
Explainable Artificial Intelligence Applications in Cyber Security: State-of-the-Art in Research
LineVD: Statement-level Vulnerability Detection using Graph Neural Networks
TABOR: A Highly Accurate Approach to Inspecting and Restoring Trojan Backdoors in AI Systems
Mitigation Tools
Tools related to this risk domain, via shared responsible AI topics.
Open Source
View all →flair
flairNLP/flair
A very simple framework for state-of-the-art Natural Language Processing (NLP)
⭐ 14,353
PySyft
OpenMined/PySyft
Perform data science on data that remains in someone else's server
⭐ 10,041
FATE
FederatedAI/FATE
An Industrial Grade Federated Learning Framework
⭐ 6,100
adversarial-robustness-toolbox