logoalt Hacker News

arianvanptoday at 1:46 PM1 replyview on HN

Given they use nx my bet is on developer laptop compromise through the nx vscode extension that also compromised GitHub engineer's laptop


Replies

dist-epochtoday at 2:28 PM

the security of their packages should not depend on one laptop being compromised