CVE-2026-10894

An use after free flaw was found in the Printing component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513445101...

CVE-2026-10894

creationtimestamp| type| source ---|---|--- 2026-06-05 13:23:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918...

CVE-2025-10894

creationtimestamp| type| source ---|---|--- 2025-09-25 05:23:19+00:00| seen| https://gist.github.com/Darkcrai86/2755052cf43db2d8afc28fee4f30321a...

CVE-2025-10894

Malicious code was inserted into the Nx build system package and several related plugins. The tampered package was published to the npm software registry, via a supply-chain attack. Affected versions contain code that scans the file system, collects credentials, and posts them to GitHub as a repo...

CVE-2025-10894

Malicious code was inserted into the Nx build system package and several related plugins. The tampered package was published to the npm software registry, via a supply-chain attack. Affected versions contain code that scans the file system, collects credentials, and posts them to GitHub as a repo...

@aws/nx-plugin (>=0.21.0 <=0.51.4), @caliobase/caliobase-nx (>=0.3.53 <=0.3.54) +69 more potentially affected by CVE-2025-10894 via @nx/workspace (>=21.0.0-beta.0 <=21.5.0-canary.20250904-2c678a1)

@nx/workspace NPM version =21.0.0-beta.0, =0.21.0, =0.3.53, =1.1.1, =2.1.1, =2.1.1, =2.1.1, =2.1.1, =0.0.1, =0.0.3, =0.0.1, =0.0.3, =0.0.3, =0.3.3 and more Source cves: CVE-2025-10894 Source advisory: OSV:MAL-2025-41442...

@10xsai/cloudflare-router-nx-plugin (=1.0.0), @akanjs/config (>=0.0.4 <=0.0.34) +167 more potentially affected by CVE-2025-10894 via @nx/js (>=20.0.0-beta.0 <=20.9.0-canary.20250415-bc685ce)

@nx/js NPM version =20.0.0-beta.0, =0.0.4, =0.0.47, =0.0.1, =0.0.2, =0.0.4, =0.0.9, =0.0.0, =1.0.0, =1.0.0, =0.5.0, =0.4.1, =0.4.6 and more Source cves: CVE-2025-10894 Source advisory: OSV:MAL-2025-41439...

@10xsai/cloudflare-router-nx-plugin (=1.0.0), @akanjs/config (>=0.0.4 <=0.0.34) +177 more potentially affected by CVE-2025-10894 via @nx/workspace (>=20.0.0-beta.0 <=20.9.0-canary.20250415-bc685ce)

@nx/workspace NPM version =20.0.0-beta.0, =0.0.4, =0.0.47, =0.0.1, =0.0.2, =0.0.4, =0.0.9, =0.0.0, =1.0.0, =1.0.0, =0.5.0, =0.4.1, =0.4.6 and more Source cves: CVE-2025-10894 Source advisory: OSV:MAL-2025-41442...

@codingducksrl/nx-duck (>=0.4.1 <=0.4.6), @nativescript/plugin-tools (>=5.5.0 <=5.5.3) +11 more potentially affected by CVE-2025-10894 via @nx/node (>=20.0.0-beta.0 <=20.9.0-canary.20250415-bc685ce)

@nx/node NPM version =20.0.0-beta.0, =0.4.1, =5.5.0, =4.0.0, =2.12.0, =20.0.0-beta.0, =20.0.0-beta.0, =20.0.0-beta.0, =20.0.0, =20.0.0, =0.2.0, =20.0.0, =20.2.1-dev.3 - @terrxo/nx-cloudflare =4.0.1 - @ziacik/azure-func =4.0.0 Source cves: CVE-2025-10894 Source advisory: OSV:MAL-2025-41441...

@alauda-fe/create-alauda-mfe-plugin (>=0.0.1 <=0.0.2), @apj-pace/pace-nx-plugin (>=0.0.2 <=0.0.5) +75 more potentially affected by CVE-2025-10894 via nx (>=20.0.0-beta.0 <=20.0.9)

nx NPM version =20.0.0-beta.0, =0.0.1, =0.0.2, =0.0.0, =0.5.0, =0.0.1, =0.0.25, =20.0.0-beta.0, =20.0.0-beta.0, =20.0.0-beta.0, =20.0.0-beta.0, =20.0.0-beta.0, =20.0.0-canary.20240926-529ab94 and more Source cves: CVE-2025-10894 Source advisory: OSV:MAL-2025-41443...

@abelfubu/schematics (=0.1.1), @alfresco/aca-generators (>=1.0.0 <=1.0.1) +147 more potentially affected by CVE-2025-10894 via nx (>=21.0.0-beta.0 <=21.7.0-canary.20250930-e144408)

nx NPM version =21.0.0-beta.0, =1.0.0, =1.0.0, =0.0.1, =11.0.0, =0.21.0, =0.0.1, =2.23.0, =0.3.53, =0.0.5, =0.0.4, =0.7.10, =0.7.29 - @edirect/nest-app =11.0.0 - @edirect/redis =11.0.0 and more Source cves: CVE-2025-10894 Source advisory: OSV:MAL-2025-41443...

@abelfubu/schematics (>=0.0.3 <=0.1.1), @alfresco/aca-generators (>=1.0.0 <=1.0.4) +137 more potentially affected by CVE-2025-10894 via @nx/devkit (>=21.0.0-beta.0 <=21.5.0-canary.20250904-2c678a1)

@nx/devkit NPM version =21.0.0-beta.0, =0.0.3, =1.0.0, =1.0.0, =1.0.0, =0.0.11, =0.21.0, =0.0.1, =0.3.53, =0.0.5, =0.0.4, =9.0.2, =9.1.0 - @eumentis/nx-plugin =1.3.0 and more Source cves: CVE-2025-10894 Source advisory: OSV:MAL-2025-41436...

@caliobase/caliobase-nx (>=0.3.53 <=0.3.54), @nestledjs/all (>=0.0.1 <=0.1.22) +4 more potentially affected by CVE-2025-10894 via @nx/node (>=21.0.0-beta.0 <=21.5.0-canary.20250904-2c678a1)

@nx/node NPM version =21.0.0-beta.0, =0.3.53, =0.0.1, =0.0.1, =0.0.1, =21.0.0, =21.0.0, =21.5.0-canary.20250904-ec1f1a4 Source cves: CVE-2025-10894 Source advisory: OSV:MAL-2025-41441...

@aws/nx-plugin (>=0.21.0 <=0.51.4), @caliobase/caliobase-nx (>=0.3.53 <=0.3.54) +38 more potentially affected by CVE-2025-10894 via @nx/eslint (>=21.0.0-beta.0 <=21.5.0-canary.20250904-2c678a1)

@nx/eslint NPM version =21.0.0-beta.0, =0.21.0, =0.3.53, =0.0.1, =0.0.1, =0.0.1, =0.0.3, =21.0.0, =21.0.0, =21.0.0, =21.0.0, =21.0.0, =21.0.0, =21.0.0, =21.0.0, =21.5.0-canary.20250904-ec1f1a4 and more Source cves: CVE-2025-10894 Source advisory: OSV:MAL-2025-41438...

@nx/powerpack-enterprise-cloud (>=3.0.0 <=3.1.1) potentially affected by CVE-2025-10894 via @nx/enterprise-cloud (>=3.0.0-alpha.0 <=3.1.1)

@nx/enterprise-cloud NPM version =3.0.0-alpha.0, =3.0.0, =3.1.1 Source cves: CVE-2025-10894 Source advisory: OSV:MAL-2025-41437...

@nx/azure-cache (>=3.0.0 <=3.1.1), @nx/conformance (>=3.0.0 <=3.1.1) +13 more potentially affected by CVE-2025-10894 via @nx/key (>=3.0.0-alpha.0 <=3.1.1)

@nx/key NPM version =3.0.0-alpha.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.1.1 Source cves: CVE-2025-10894 Source advisory: OSV:MAL-2025-41440...

@abelfubu/schematics (=0.1.1), @aws/nx-plugin (>=0.21.0 <=0.52.0) +105 more potentially affected by CVE-2025-10894 via nx (>=21.0.0-beta.0 <=21.6.0-canary.20250926-7f4a8ea)

nx NPM version =21.0.0-beta.0, =0.21.0, =0.0.1, =0.3.53, =0.0.5, =0.0.4, =1.0.0, =3.22.0, =9.0.0-next.68, =0.0.1, =0.1.0, =0.1.1 - @hanspoo/global-types =0.1.9 and more Source cves: CVE-2025-10894 Source advisory: OSV:GHSA-CXM3-WV7P-598C...

@aws/nx-plugin (>=0.21.0 <=0.51.4), @caliobase/caliobase-nx (>=0.3.53 <=0.3.54) +67 more potentially affected by CVE-2025-10894 via @nx/js (>=21.0.0-beta.0 <=21.5.0-canary.20250904-2c678a1)

@nx/js NPM version =21.0.0-beta.0, =0.21.0, =0.3.53, =1.1.1, =2.1.1, =2.1.1, =2.1.1, =2.1.1, =0.0.1, =0.0.3, =0.0.1, =0.0.3, =0.0.3, =0.3.3 and more Source cves: CVE-2025-10894 Source advisory: OSV:GHSA-CXM3-WV7P-598C...

@aws/nx-plugin (>=0.21.0 <=0.51.4), @caliobase/caliobase-nx (>=0.3.53 <=0.3.54) +69 more potentially affected by CVE-2025-10894 via @nx/workspace (>=21.0.0-beta.0 <=21.5.0-canary.20250904-2c678a1)

@nx/workspace NPM version =21.0.0-beta.0, =0.21.0, =0.3.53, =1.1.1, =2.1.1, =2.1.1, =2.1.1, =2.1.1, =0.0.1, =0.0.3, =0.0.1, =0.0.3, =0.0.3, =0.3.3 and more Source cves: CVE-2025-10894 Source advisory: OSV:GHSA-CXM3-WV7P-598C...

@abelfubu/schematics (=0.1.1), @alfresco/aca-generators (>=1.0.0 <=1.0.1) +147 more potentially affected by CVE-2025-10894 via nx (>=21.0.0-beta.0 <=21.7.0-canary.20250930-e144408)

nx NPM version =21.0.0-beta.0, =1.0.0, =1.0.0, =0.0.1, =11.0.0, =0.21.0, =0.0.1, =2.23.0, =0.3.53, =0.0.5, =0.0.4, =0.7.10, =0.7.29 - @edirect/nest-app =11.0.0 - @edirect/redis =11.0.0 and more Source cves: CVE-2025-10894 Source advisory: OSV:GHSA-CXM3-WV7P-598C...