s1ngularity: supply chain attack in Nx packages
An LLM-powered supply chain attack just hit npm. Here's why your AI dev tools are now a security vector.
Why it matters
A sophisticated supply chain attack exploited stolen npm credentials to inject malicious code that used LLMs to exfiltrate developer secrets. This signals a new class of AI-enabled threats targeting the infrastructure developers rely on—and exposes how AI tooling (Claude, Gemini, Q CLIs) can become attack surface in build pipelines.
The key facts
7 to knowAttack vector: Malicious Nx packages with postinstall scripts using LLMs to scan filesystems for secrets
Timeline: August 26, 2025, 6:32 PM EDT to 10:44 PM EDT (4+ hours exposure)
Attack mechanism: LLM-powered credential exfiltration posted as encoded strings to attacker-controlled GitHub repos
AI tools exploited: Claude Code CLI, Gemini CLI, Q CLI required for full payload execution
Vercel impact: No confirmed compromised builds (required 4 specific conditions: Nx package install + GitHub CLI + GitHub token + AI CLI present)
Scope: Affected Nx ecosystem packages removed from npm; Vercel purged build caches; small user cohort notified
Defense implication: LLM CLI tools in build containers introduce new credential-theft surface area
Go to the source
Vercel Blogvercel.com
Publisher excerpt: Threat actors published modified versions of the Nx package and some of its supporting libraries to the npm registry with the goal of exfiltrating developer and service credentials. to check if your local or other CI environments are impacted.Builds on Vercel are safe from this vulnerability by…
