{"campaign":{"name":"s1ngularity nx Build System Compromise","slug":"s1ngularity-nx-build-system-compromise","href":"/ti/campaigns/s1ngularity-nx-build-system-compromise","description":"August 2025 compromise of the nx build system and @nx/js that stole credentials, SSH keys and wallet data from Linux and macOS developers and published the loot to attacker-created GitHub repositories.","objective":"Steal developer credentials, SSH keys and crypto wallets at scale via a trusted build tool.","aliases":[],"discovered_at":"2025-08-27"},"packages":[{"ecosystem":"npm","name":"nx","href":"/ti/packages/npm/nx","threat_types":["credential_stealer","data_exfiltration","wiper"],"versions":["21.5.0"]},{"ecosystem":"npm","name":"@nx/js","href":"/ti/packages/npm/@nx/js","threat_types":["credential_stealer","data_exfiltration","wiper"],"versions":["20.9.0"]}],"indicators":[],"ttps":[{"name":"Supply Chain Compromise: Compromise Software Dependencies and Development Tools","mitre_attack_id":"T1195.001","href":"/ti/ttps/T1195.001"},{"name":"Command and Scripting Interpreter: JavaScript","mitre_attack_id":"T1059.007","href":"/ti/ttps/T1059.007"},{"name":"Unsecured Credentials: Credentials In Files","mitre_attack_id":"T1552.001","href":"/ti/ttps/T1552.001"},{"name":"Exfiltration Over C2 Channel","mitre_attack_id":"T1041","href":"/ti/ttps/T1041"},{"name":"Unsecured Credentials: Private Keys","mitre_attack_id":"T1552.004","href":"/ti/ttps/T1552.004"},{"name":"Steal Application Access Token","mitre_attack_id":"T1528","href":"/ti/ttps/T1528"},{"name":"Application Layer Protocol: Web Protocols","mitre_attack_id":"T1071.001","href":"/ti/ttps/T1071.001"},{"name":"Web Service","mitre_attack_id":"T1102","href":"/ti/ttps/T1102"},{"name":"Event Triggered Execution","mitre_attack_id":"T1546","href":"/ti/ttps/T1546"},{"name":"Data Destruction","mitre_attack_id":"T1485","href":"/ti/ttps/T1485"}],"related_campaigns":[],"reports":[{"title":"nx Build System Compromised Targeting Linux and MacOS developers","url":"https://safedep.io/nx-build-system-compromise","published_at":"2025-08-27"}]}