---
id: 6983
title: "s1ngularity: supply chain attack leaks secrets on GitHub: everything you need to know"
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/s1ngularity-supply-chain-attack"
published_at: "2025-08-27T12:00:54Z"
tags: ["ai-security", "supply-chain", "secrets", "github-actions", "npm", "nx", "wiz-research", "s1ngularity"]
phying_url: "https://phying.com/item/6983"
lang: en
---

# s1ngularity: supply chain attack leaks secrets on GitHub: everything you need to know

## Summary

Wiz's initial analysis of s1ngularity: malicious Nx npm versions harvested wallets, tokens and SSH keys and abused local AI CLIs for recon; a second phase exposed 5,500+ private repositories.

## Intelligence Metadata

- **Sources:** wiz.io
- **Published:** 2025-08-27T12:00:54Z
- **Original:** https://www.wiz.io/blog/s1ngularity-supply-chain-attack
- **Phying News:** https://phying.com/item/6983