Miembros de
Boletines de Vulnerabilidades |
CVE-2025-10894 |
|
| Software afectado | GITHUB |
| Malicious code was inserted into the Nx (build system) package and several related plugins. The tampered package was published to the npm software registry, via a supply-chain attack. Affected versions contain code that scans the file system, collects credentials, and posts them to GitHub as a repo under user's accounts. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2025-10894 | |
