Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Snyk

What an 'Aha' Moment with an Org Admin Token Taught One DevSecCon Speaker About AI Security

Sep 4, 2025 By Alysa Turner In Snyk
As the summer winds down and conversation around AI Security heats up, the Snyk team is in full swing planning mode for a double-header this October—with the return of DevSecCon’s Flagship conference, focusing this year on Securing the Shift to AI Native, and serving as the founding partner of the inaugural AI Security Summit.
Read Post

Nx npm Malware Explained: AI Agent Hijacking

Aug 28, 2025 By Snyk In Snyk
Nx npm malware (Aug 2025): attackers published malicious Nx packages that weaponized AI coding agents (Claude Code, Gemini CLI, Amazon Q) via a postinstall script to inventory sensitive files and exfiltrate sensitive data to public GitHub repos named “s1ngularity-repository-*.” We break down what happened, affected versions, and how to check + respond (rotate credentials, hunt IoCs, and more). Resources.
View Video
Snyk

Weaponizing AI Coding Agents for Malware in the Nx Malicious Package Security Incident

Aug 27, 2025 By Liran Tal In Snyk
On August 26–27, 2025 (UTC), eight malicious Nx and Nx Powerpack releases were pushed to npm across two version lines and were live for ~5 hours 20 minutes before removal. The attack also impacts the Nx Console VS Code extension.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.