How a single GitHub Actions misconfiguration led to malicious Nx packages stealing credentials and weaponizing AI agents against developers.
