Use case sources
Source reports and analysis supporting this case are listed below. AITBM interpretation and any indicative scoring are derived from this public evidence.
Incident overview
Nx confirms malicious npm releases that collected sensitive files, attempted to invoke local AI tools, and uploaded results to public repositories.
Why this analysis has no ERS
The malicious npm package and attempted AI CLI invocation are documented, but successful AI-tool execution and an observed victim AI control failure are not established.
Status: Not scorable by design · Classification: Incident · source date 2025-09-05
AIDEFEND evidence routes
No AIDEFEND control evidence is assigned to this record.
Related AITBM rubrics
No direct IVP route recorded.