{
  "id": "AHL-2025-0003",
  "url": "https://aihacklog.com/incidents/s1ngularity-nx-ai-cli-malware/",
  "status": "live",
  "title": "s1ngularity: hijacked Nx packages made AI CLIs hunt secrets",
  "summary": "Attackers stole the Nx project's npm token and published malicious versions of the Nx build system on 26 August 2025. The malware ran the AI command-line tools on developers' machines to search for secrets, then posted stolen credentials to public GitHub repositories.",
  "ai_role": "weapon",
  "attack_types": [
    "ai-malware"
  ],
  "autonomy": "assisted",
  "evidence": "E1",
  "severity": 2,
  "occurred": "2025-08-24",
  "occurred_end": "2025-08-27",
  "disclosed": "2025-08-27",
  "ai_systems": [
    {
      "vendor": "anthropic",
      "product": "Claude"
    },
    {
      "vendor": "google",
      "product": "Gemini"
    },
    {
      "vendor": "amazon",
      "product": "Q"
    }
  ],
  "actor": {
    "name": null,
    "type": "unknown",
    "attribution": "unknown"
  },
  "victims": {
    "names": [
      "Nx"
    ],
    "sectors": [
      "technology"
    ],
    "countries": [],
    "orgs_affected": null
  },
  "impact": {
    "loss_usd": null,
    "loss_basis": null,
    "records": null,
    "note": "More than 1,000 GitHub accounts received attacker-created repositories, according to Socket"
  },
  "frameworks": {
    "atlas": [],
    "attack": [],
    "owasp_llm": [],
    "owasp_agentic": [],
    "cve": []
  },
  "chain": null,
  "notice": null,
  "sources": [
    {
      "url": "https://github.com/nrwl/nx/security/advisories/GHSA-cxm3-wv7p-598c",
      "publisher": "Nx",
      "title": "Malicious versions of Nx and some supporting plugins were published (GHSA-cxm3-wv7p-598c)",
      "kind": "primary",
      "date": "2025-08-27",
      "supports": "Affected versions, how the npm token was stolen, malicious behaviour, timeline",
      "archive": "https://web.archive.org/web/20261113093337/https://github.com/nrwl/nx/security/advisories/GHSA-cxm3-wv7p-598c"
    },
    {
      "url": "https://nx.dev/blog/s1ngularity-postmortem",
      "publisher": "Nx",
      "title": "S1ngularity: what happened, how we responded, what we learned",
      "kind": "primary",
      "date": "2025-09-05",
      "supports": "Use of local AI tools, four hours on the registry, remediation",
      "archive": "https://web.archive.org/web/20261109095016/https://nx.dev/blog/s1ngularity-postmortem"
    },
    {
      "url": "https://socket.dev/blog/nx-packages-compromised",
      "publisher": "Socket",
      "title": "Nx npm packages compromised in supply chain attack weaponizing AI CLI tools",
      "kind": "vendor",
      "date": "2025-08-27",
      "supports": "The three AI CLIs called, number of victim accounts",
      "archive": "https://web.archive.org/web/20260602094233/https://socket.dev/blog/nx-packages-compromised"
    }
  ],
  "related": [],
  "published": "2026-11-15",
  "updated": "2026-11-15",
  "changelog": [
    {
      "date": "2026-11-15",
      "note": "Record created from the Nx advisory and post-mortem and Socket's analysis."
    }
  ],
  "licence": "CC BY 4.0",
  "licence_url": "https://creativecommons.org/licenses/by/4.0/",
  "attribution": "AI Hack Log (https://aihacklog.com/)"
}