NX is build software. You write your code on your laptop, you press “build”, it runs NX, and you get a built version you can put onto your web server. If you could hack NX, you could hit a lot of p…
  • Architeuthis@awful.systemsEnglish
    7·
    6 days ago

    It’s like a one-and-a-half-page article that also comes in audio and video form, don’t be lazy.

    spoiler

    They vibe coded a bash injection vulnerability in their devops code, which was used to gain access to the repo and push out a release with malicious code, which prompted any installed LLM wrappers like cursor to gather anything that looked like a configuration or text file in the infected machine and presumably leak them to the attacker.