SYMBOLCOMMON_NAMEaka. SYNONYMS
js.s1ngularity (Back to overview)

s1ngularity Stealer


According to StepSecurity, this is a stealer deployed through a compromised Nx package, targeting system environment properties, cryptocurrency wallets, and development credentials. Data is exfiltrated to Github using stolen tokens.

References
2025-08-27StepSecurityAnish Kurmi
Supply Chain Security Alert: Popular Nx Build System Package Compromised with Data-Stealing Malware
s1ngularity Stealer

There is no Yara-Signature yet.