Ledger / 26 Aug 2025
s1ngularity: Nx npm compromise runs victims' AI CLIs to hunt secrets
Confirmed
Malware code itself invokes the installed AI CLIs with permission-bypass flags and a recon prompt.
A malicious postinstall script checked for Claude Code, Gemini CLI and Q, and ran them with approval prompts disabled. The prompt told each agent to find secret and wallet files and write the paths to an inventory file, which the malware then exfiltrated.
“The script prompts these tools with dangerous flags: --dangerously-skip-permissions --yolo --trust-all-tools”StepSecurity
Sources
- s1ngularity: Popular Nx Build System Package Compromised with Data-Stealing MalwareStepSecurity · 27 Aug 2025 · primary source
- Date
- 26 Aug 2025
- Disclosed
- 27 Aug 2025
- Actor
- Unknown (s1ngularity) (unknown), as attributed by StepSecurity
- Targets
- Developers installing malicious Nx npm versions; thousands of GitHub accounts
- What the AI did
- Supply chain, Agentic intrusion, Recon
- Model
- Claude Code CLI, Gemini CLI, Amazon Q CLI
- Model family
- Anthropic, Google, Amazon
- Model basis
- stated by researcher
- Autonomy
- semi-autonomous
- Outcome
- Credentials, tokens, SSH keys and wallets stolen and posted to public GitHub repos; malicious versions live about five hours.