Malicious Nx package ran Claude Code with permissions bypassed

A postinstall script in npm package nx 21.5.0 launched Claude Code, Gemini CLI and Q with approval prompts disabled to hunt for secret files. Seven more malicious versions followed within two hours; GitGuardian counted 2,349 secrets in created public repos and 10,767 private repos exposed.

• nx 21.5.0 with telemetry.js was published on August 26, 2025 at 22:32 UTC
• The script ran claude, gemini and q with approval-bypass flags
• GitGuardian found 2,349 secrets in victims' public repositories
• A second wave on August 28 exposed 10,767 private repositories