The Nx supply chain attack (dubbed 's1ngularity') exploited a vulnerability in GitHub Actions workflows within the Nx repository, a widely used open-source build system for enterprise JavaScript/TypeScript projects. Attackers manipulated a pull request title and abused the `pull_request_target` configuration to execute arbitrary code in Nx’s CI pipeline, publishing a malicious version of the Nx package on NPM. This embedded a credential-stealing script (`telemetry.js`) that harvested 2,180 GitHub accounts, 7,200 repositories, and sensitive data including GitHub/npm tokens, SSH keys, .env files, cryptocurrency wallets, and other local credentials—all uploaded to public GitHub repositories for exfiltration.The attack leveraged AI-driven tools (Claude, Q, Gemini) to automate and refine credential discovery, bypassing AI safeguards by tuning prompts (e.g., labeling actions as 'penetration testing'). Despite Nx’s response—revoking tokens, enforcing 2FA, and migrating to NPM’s Trusted Publisher model—stolen credentials remain valid, enabling ongoing access to corporate systems. The breach highlights critical risks in open-source supply chains, CI/CD security, and AI weaponization, with long-term implications for affected organizations, including potential source code leaks, infrastructure compromises, and cascading attacks via reused credentials.