13:00
2026-07-28
docker.com
ai-safety
Coding Agent Horror Stories: The 29 Million Secret Problem
On August 26, 2025, malicious versions of the Nx build package, which draws roughly four million downloads a week, were published to npm with a post-install hook that executed a credential-stealing sc…