Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Malicious versions of Nx and some supporting plugins were published

github.com

Post reply on HN
Print view View original

41–50 of 460 posts

Re: Malicious versions of Nx and some supporting plugins were published

#41

Post by pcthrowaway »

lionkor wrote: post #30
echelon wrote: post #23

Earlier quoted context omitted.

Then safety and alignment are a farce and these are not serious tools. This is 100% within the responsibility of the LLM vendors. Beyond the LLM, there is a ton of engineering work that can be put in place to detect this, monitor it, escalate, alert impacted parties, and thwart it. This is literally the impetus for funding an entire team or org within both of these companies to do this work. Cloud LLMs are not interp…

You mean the safety and alignment that boils down to telling the AI to "please not do anything bad REALLY PLEASE DONT"? lol working great is it

You have to make sure it knows to only run destructive code from good people. The only way to stop a bad guy with a zip bomb is a good guy with a zip bomb.

Re: Malicious versions of Nx and some supporting plugins were published

#42

Post by cluckindan »

grav wrote: post #32

> Interestingly, the malware checks for the presence of Claude Code CLI or Gemini CLI on the system to offload much of the fingerprintable code to a prompt. Can anyone explain this? Why is it an advantage?

The malware is not delivering any exploits or otherwise malicious-looking code, so endpoint security is unlikely to flag it as malicious.

Re: Malicious versions of Nx and some supporting plugins were published

#43

Post by cluckindan »

BoredPositron wrote: post #26
divan wrote: post #6

So any process on my computer could just start using Claude Code for their own purposes or what? o_O

Edit: Was not supposed to create a flamewar about semantics...

It’s not an RCE, it is a supply chain attack.

Re: Malicious versions of Nx and some supporting plugins were published

#44

Post by divan »

BoredPositron wrote: post #26
divan wrote: post #6

So any process on my computer could just start using Claude Code for their own purposes or what? o_O

Edit: Was not supposed to create a flamewar about semantics...

Ah, I didn't know that claude code has headless mode...

Re: Malicious versions of Nx and some supporting plugins were published

#45

Post by cowpig »

I don't understand why people think it's a good idea to run coding agents as their own user on their own machines.

I use this CLI tool for spinning up containers and attaching the local directory as a volume:

https://github.com/Monadical-SAS/cubbi

It isn't perfect but it's a lot better than the alternative. Looked a lot at VM-based sandbox environments but by mounting the dir as a volume in the container, you can still do all of your normal stuff in your machine outside the container environment (editor, tools, etc), which in practice saves a lot of headache.

Re: Malicious versions of Nx and some supporting plugins were published

#46

Post by fsflover »

mikepurvis wrote: post #38
fsflover wrote: post #28

Earlier quoted context omitted.

> I do most of my coding in a VM now Perhaps you may be interested in Qubes OS, where you do everything in VMs with a nice UX. My daily driver, can't recommend it enough.

How does it avoid the sharing headaches that make the ergonomics of snaps so bad?

I never used snaps, so I don't understand what you mean here. Here's a couple of typical Qubes usage patterns: https://www.qubes-os.org/news/2022/10/28/how-to-organize-you..., https://blog.invisiblethings.org/2011/03/13/partitioning-my-...

Re: Malicious versions of Nx and some supporting plugins were published

#47

Post by f311a »

croes wrote: post #25
f311a wrote: post #11

People really need to start thinking twice when adding a new dependency. So many supply chain attacks this year. This week, I needed to add a progress bar with 8 stats counters to my Go project. I looked at the libraries, and they all had 3000+ lines of code. I asked LLM to write me a simple progress report tracking UI, and it was less than 150 lines. It works as expected, no dependencies needed. It's extremely simpl…

Without these dependencies there would be no training data so the AI can write your code

I could write it myself. It's trivial, just takes a bit more time, and googling escape sequences for the terminal to move the cursor and clear lines.

Re: Malicious versions of Nx and some supporting plugins were published

#48

Post by terminalbraid »

vorgol wrote: post #20

OSs need to stop letting applications have a free reign of all the files on the file system by default. Some apps come with apparmor/selinux profiles and firejail is also a solution. But the UX needs to change.

Which operating system lets an application have "free reign of all the files on the file system by default"? Neither Linux, nor any BSD, nor MacOS, nor Windows does. For any of those I'd have to do something deliberately unsafe such as running it as a privileged account (which is not the "default").

Re: Malicious versions of Nx and some supporting plugins were published

#49

Post by echelon »

octo888 wrote: post #27
echelon wrote: post #19

Google and Anthropic: this is a SEV0. Assemble your teams and immediately do the following: 1. Issue a public statement that you are aware of this issue and are tracking it 2. Begin monitoring your analytics to see which customers are impacted and shut down their access 3. Reach out to impacted customers and let them know you'll be preparing a list of next steps for them. 4. Monitor for a wider blast radius or larger…

A single top-level comment would suffice. No need to reply to various comments with the same kind of message

My first two comments in this thread were my initial reaction to what was happening.

I made the above, longer form post to hopefully grab the attention of Google and Anthropic folks. My top-level posts always fall to the very bottom of the page.

Google and Anthropic need to be tracking this.

Post reply on HN