CVE-2025-10894 in nx
요약
\~에 의해 MITRE • 2025. 09. 25.
Malicious code was inserted into the Nx (build system) package and several related plugins. The tampered package was published to the npm software registry, via a supply-chain attack. Affected versions contain code that scans the file system, collects credentials, and posts them to GitHub as a repo under user's accounts.
If you want to get best quality of vulnerability data, you may have to visit VulDB.