OpsBuzz

Alert

Weaponizing AI Coding Agents for Malware in the Nx Malicious Package Security Incident

On August 26–27, 2025 UTC , eight malicious Nx and Nx Powerpack releases were pushed to npm across two version lines and were live for ~5 hours 20 minutes

AI Security · MEDIUM
Source: Snyk Security BlogAug 27, 2025, 4:00 AMAI Securitymedium

Full content

On August 26–27, 2025 (UTC), eight malicious Nx and Nx Powerpack releases were pushed to npm across two version lines and were live for ~5 hours 20 minutes before removal.

Related alerts

mult-agentes 1.0.0AI Security

Multi-agent framework with 684 skills, constitutional governance, 19-layer runtime pipeline, privacy, AI, skills, cognitive, scalability, observability , and Anthropic SDK integration.

ooai-llm 0.5.1AI Security

Typed LLM settings, LangChain-first factories, LiteLLM metadata enrichment, and callback helpers.

flyteplugins-openai 2.3.6AI Security

OpenAI plugin for flyte

Weaponizing AI Coding Agents for Malware in the Nx Malicious Package Security Incident | OpsBuzz