The Nx Supply Chain Attack: How to Reproduce the First Steps

Comments (1)

veganmosfet · 2h ago

I read the post-mortem analysis of the nx S1ngularity supply chain attack and found the attack vector quite interesting. In this post, I will explain how to reproduce the first steps (though I am not 100% sure if this is exactly what happened).

Teams Outlast Projects (frederickvanbrabant.com)

Ask HN: How do I announce that I'm looking for a new job while being employed?

Orsted Sues Trump Administration in Fight to Restart Its Blocked Wind Farm (nytimes.com)

A complete map of the Rust type system (rustcurious.com)

Package Managers Are Evil (gingerbill.org)

Are Humans Watching Animals Too Closely? (theatlantic.com)

Reverse-engineering Roadsearch Plus, or, roadgeeking with an 8-bit CPU (oldvcr.blogspot.com)

Adjacency Matrix and std:mdspan, C++23 (cppstories.com)

Pickleball Took over Tennis Courts, as Seen from the Sky (nytimes.com)

After Afghan Quake, Many Male Rescuers Helped Men but Not Women (nytimes.com)

C++20 Modules: Practical Insights, Status and TODOs (chuanqixu9.github.io)

A desktop environment without graphics (tmux-like) (github.com)

Show HN: Dir2md – Convert Any Repo into AI-Ready Markdown Blueprints (github.com)

Hot Chips 2025: Session 1 – CPUs – By George Cozma (chipsandcheese.com)

Getting AI Agent Architecture Right with MCP (decodingml.substack.com)

Tyromancy (Telling the future using cheese) (en.wikipedia.org)

Indiana Jones and the Last Crusade Adventure Prototype Recovered for the C64 (gamesthatwerent.com)

VMware's in court again. Customer relationships rarely go this wrong (theregister.com)

Plot IMDB Series Ratings (imdb.derfor.dk)

10xDevAi (10xdevai.com)

Your Zodiac Sign Is 2k Years Out of Date (nytimes.com)

Nicholas (Nick) J. Fuentes (x.com)

Every Commodore Amiga Model Ever Made [video] (youtube.com)

Training to Improve Memory (ethz.ch)

David Baltimore, Nobel-Winning Molecular Biologist, Dies at 87 (nytimes.com)

Pre-owned software trial kicks off in UK as Microsoft pushes resale ban (theregister.com)

Lolgato: Advanced controls for Elgato lights on macOS (github.com)

Show HN: Search the IndieWeb, one query at a time (search.indieblog.page)

Don't Build an RL Environment Startup (benanderson.work)

MacBook lid angle sensor sound effects (github.com)

Show HN: AIHint – Open standard for verifiable website trust metadata (github.com)

Show HN: The Daily Word Game Experience (wafflegames.net)

TS framework introspectable by AI via GraphQL (runner.bluelibs.com)

Beyond package management: How Nix refactored my digital life (jimmyff.co.uk)

Undersea cables cut in Red Sea, disrupting internet access in Asia and Mideast (apnews.com)

ButterBarTheGr8's Aug 15, 2025 comment in "Unsuitable SSD/NVMe hardware for ZFS" (github.com)

Will AI Choke Off the Supply of Knowledge? (wsj.com)

Source Cooperative (source.coop)

Ask HN: What program is running on this 1996 laptop?

Tor VPN Beta (Android) (play.google.com)

14 Killed in protests in Nepal over social media ban (tribuneindia.com)

Ask HN: Would Windows users want a native multi-model AI client?

The Dropshipping Problem: Youth Digital Marketing Gone Wrong

Trillion Dollar Elephants (dbushell.com)

Show HN: Silksong Map Online (silksongmap.co)

Quantum router could speed up quantum computers (newscientist.com)

Alloyed agents: combining LLMs to improve AI code generation (enginelabs.ai)

OntoMotoOS: An "Operating System" Between Delusion and Scholarship (medium.com)

Using Cursor Commands to Onboard a New Developer to a Repository (shlep.ai)

Show HN: I made a tool to turn anxiety-inducing news into short narrated videos (explainerslop.xyz)

The Nx Supply Chain Attack: How to Reproduce the First Steps

Comments (1)