Active NPN Supply Chain Attack on `Nx` Package

Comments (1)

longcat · 5h ago

The `nx` package versions 20.11.0 and 21.7.0 appears to be compromised with code published that would attempt malicious actions including modifying the installers .bashrc/.zshrc.

Ask HN: Why hasn't x86 caught up with Apple M series?

Ask HN: Does sentience put stress on the brain?

Ask HN: How can I recover and run my old mobile game from the 2010s?

Out of curiosity: what kind of people use this "forum" (I mean Hacker News)?

Ask HN: What should I use to run React Native tests on a device?

Ask HN: Why are so many services rejecting Google Voice numbers for signups?

Ask HN: Any experienced devs who use AI extensively in their work?

Ask HN: What to Do with Old iPads?

Ask HN: Is there a temp phone number like temp email?

Ask HN: Do You Believe in Aliens?

Ask HN: How is Nvidia streaming 4k games while remote control sw is low q lag

Ask HN: How are you attributing your AI usage when developing software?

Stop squashing your commits. You're squashing your AI too

Patient Lisp Hacker Seeks Same for Long Walks Through IPL-V Code

Ask HN: Has anyone else used online communities that are archetypically "savvy"?

High rate of LLM (GPT5) hallucinations in dense stats domains (cricket)

Ask HN: Best codebases to study to learn software design?

429 Too Many Requests from registry.npmjs.org

How can a mutex in Wine be faster than a native one on Linux

Ask HN: What is wrong with modern software development

Ask HN: Recommandation for an Ergonomic Keyboard?

Ask HN: Why do people hate on Sabine Hossenfelder so much?

Ask HN: Someone has committed 20K+ LoC to a PR, exhausting my CI & AI workflows

Ask HN: Are AI filters becoming stricter than society itself?

Ask HN: I just abandoned my PyCharm subscription, what should I use now?

Ask HN: What is the biggest problem LLMs solved in your life/work?

Ask HN: How can I trace what user queries make AI bots crawl my site?

Ask HN: Best Marketplaces for Used Servers?

ASK HN: AI in high school. Will teachers and schools have to compensate?

Ask HN: What is your source for answers?

Ask HN: Devices to allow children to listen to podcasts on my local network?

DSPy GEPA Example: Listwise Reranker

Ask HN: How do you find early stage startups to join

Problem with Payment Gateways

Ask HN: No easy way for tvOS to display long documents (e.g., terms of service)?

Ask HN: Does using public transportation make you more creative than driving?

HeartWatch: A Proactive Child Safety System

Ask HN: What's Hacker News's vision for the future?

Ask HN: Why is Apple so far behind with Siri?

Gemini in Gmail Is Pretty Well Useless

Active NPN Supply Chain Attack on `Nx` Package

Comments (1)