Malicious Nx npm Packages Reportedly Weaponize AI Coding Agents for Data Exfiltration
Date: 2025-08-21
Affected: Amazon, Anthropic, Google, Malicious Actors Compromising Nx's Cicd Pipeline And Publishing Tainted Npm Packages
Attack vector: data-exfiltration
Category: real-world
Severity: High

AI Incident Database (AIID) entry #1210: Malicious Nx npm Packages Reportedly Weaponize AI Coding Agents for Data Exfiltration. Alleged deployer/developer: Amazon, Anthropic, Google, Malicious Actors Compromising Nx's Cicd Pipeline And Publishing Tainted Npm Packages. See the linked AIID entry for full narrative, sourcing, and classification.


Mitigations:

Architectural layers (MAESTRO):