---
id: 2501
title: "Popular nx packages compromised on npm"
source_domain: aikido.dev
source_url: "https://www.aikido.dev/blog/popular-nx-packages-compromised-on-npm"
published_at: "2025-08-27 00:00"
tags: ["supply-chain", "malware", "credential-theft", "npm", "aikido", "incident", "nx"]
phying_url: "https://phying.com/item/2501"
lang: en
---

# Popular nx packages compromised on npm

## Summary

Malicious code hit popular @nx npm packages (~6 million weekly downloads); stolen credentials including npm tokens were published to a public GitHub repo, enabling further supply chain attacks.

## Intelligence Metadata

- **Sources:** aikido.dev
- **Published:** 2025-08-27 00:00
- **Original:** https://www.aikido.dev/blog/popular-nx-packages-compromised-on-npm
- **Phying News:** https://phying.com/item/2501