1 incident
Risk: Supply-chain compromise Layer: L1 Model Outcome: Held
HeldFailedGot aroundMissingNot mentionedNot read yetAttacker's ownOrder: model · harness · application · target
| Date | Incident | Risk | Chain | Controls named |
|---|---|---|---|---|
| 2025-08-26 | Nx s1ngularity: malicious npm packages drove local AI coding CLIs to enumerate secrets for exfiltration | Supply-chain compromise |