2 matches found
CVE-2025-10894
Malicious code was inserted into the Nx build system package and several related plugins. The tampered package was published to the npm software registry, via a supply-chain attack. Affected versions contain code that scans the file system, collects credentials, and posts them to GitHub as a repo...
9.6CVSS5.8AI score0.00565EPSS
SaveExploits0References6
CVE-2025-10894
Malicious code was inserted into the Nx build system package and several related plugins. The tampered package was published to the npm software registry, via a supply-chain attack. Affected versions contain code that scans the file system, collects credentials, and posts them to GitHub as a repo...
9.6CVSS7.1AI score0.00565EPSS
SaveExploits0References7
20