discovered
@nx/js is identified in the SafeDep analysis "nx Build System Compromised Targeting Linux and MacOS developers". The popular npm package `nx` was compromised, targeting Linux and macOS developers. Malicious versions included a postinstall script that stole credentials, exfiltrated sensitive files, and added destructive commands to shell configs, causing system shutdowns and data leaks.