Nx packages AI supply chain compromises Vulnerability

Traditional security frameworks fail to address AI-specific attack vectors such as prompt injection, model poisoning, and AI supply chain compromises, creating significant security gaps. This inadequacy has enabled various exploits, including the Ultralytics AI library compromise for cryptomining and malicious Nx packages exfiltrating 23.77 million secrets in 2024.

What Happened

Traditional security frameworks fail to address AI-specific attack vectors such as prompt injection, model poisoning, and AI supply chain compromises, creating significant security gaps. This inadequacy has enabled various exploits, including the Ultralytics AI library compromise for cryptomining and malicious Nx packages exfiltrating 23.77 million secrets in 2024.

Why This Matters

Publisher reporting describes a security event affecting exfiltrating. BugSkan could not yet bind a CVE or affected version, so treat the source details as the current record.

Recommended Action

Confirm whether exfiltrating is present in your environment and review vendor guidance for this report. Apply available patches or mitigations if your deployment matches the described conditions.

Exposure

Exposure reason: This incident does not currently match a technology in My Interests.

Exploitation status: CONFIRMED_IN_THE_WILD

Primary entities:

Timeline

• Incident first seen
  Dec 29, 2025 05:30

  BugSkan first recorded this incident.

• Traditional Security Frameworks Leave Organizations Exposed to AI-Specific Attack Vectors - The Hacker News
  Dec 29, 2025 05:30

  thehackernews.com · Vulnerability

Sources

Related Incidents

Other BugSkan incidents that share identifiers, products, or vendors with this report.

My Interests Match