Popular nx packages compromised on npm

Malicious code hit popular @nx npm packages (~6 million weekly downloads); stolen credentials including npm tokens were published to a public GitHub repo, enabling further supply chain attacks.