OVER 6,700 PRIVATE REPOSITORIES MADE PUBLIC IN NX SUPPLY CHAIN ATTACK

Summary from the TLDR InfoSec newsletter

Hackers used stolen secrets from Nx to expose over 6,700 private repositories in a major supply chain attack that targeted hundreds of organizations. The threat actors leveraged malicious Nx packages to steal API keys and credentials, and exploited the compromised accounts to publish sensitive data from private repositories to public GitHub repositories.