1 incident
Risk: Supply-chain compromise Control: Least-privilege access for the agent Outcome: Did not hold
HeldFailedGot aroundMissingNot mentionedNot read yetAttacker's ownOrder: model · harness · application · target
| Date | Incident | Risk | Chain | Controls named |
|---|---|---|---|---|
| 2025-08-26 | Nx s1ngularity: malicious npm packages drove local AI coding CLIs to enumerate secrets for exfiltration | Supply-chain compromise |