A threat actor released malicious updates on the npm package repository for components of a tool popular among developers intending to steal cryptocurrencies and key developer data. According to a report by StepSecurity, the attack started in the morning of August 26, when version 21.5.0 of Nx was released to the npm registry. Nx is an open-source build platform widely used by developers to automate and streamline code testing, building and deployment workflows. Version 21.5.0 of Nx was compromised with data-stealing malware. Seven other versions of Nx that were released over the next hours and the next day were also infected. AI-Assisted Attack: Nx Infections Leak Secrets via Victim-Owned Repos The compromised Nx versions included a malicious script designed to exploit local AI…