Protect secrets from hijacked npm packages
Malicious versions of the Nx build tool were published to npm; the install script used locally installed AI coding CLIs to search the machine for secrets and wallets and uploaded them to GitHub.
Gemini CLI: real stories
1 item