Node.js 24.7.0 (Current)
Daily edition
The daily ledger
TILens turns technical updates into a focused daily brief: official releases, trusted reporting, and practitioner analysis, deduplicated and organized by topic.
Weaponizing AI Coding Agents for Malware in the Nx Malicious Package Security Incident
On August 26–27, 2025 (UTC), eight malicious Nx and Nx Powerpack releases were pushed to npm across two version lines and were live for ~5 hours 20 minutes before removal.