Welkom by die Mei-uitgawe van die Xygeni Malicious Code Digest. Hierdie maand het ons sekuriteitsnavorsingspan voortgegaan om die ontwikkelende landskap van sagteware-voorsieningskettingbedreigings oor openbare pakketregisters, ontwikkelaarsgereedskap, KI-ondersteunde werkvloeie en moderne ... dop te hou. CI/CD omgewings. Gedurende Mei het Xygeni honderde kwaadwillige pakkette geïdentifiseer en gevalideer wat op npm-, PyPI-, VS Code- en OpenVSX-ekosisteme gemik is.
Maar Mei het nie net oor volume gegaan nie. Dit was ook 'n maand waar aanvallers toenemend hul handelsmerk aangepas het by KI-inheemse ontwikkelingsomgewings, aannames oor ontwikkelaarsvertroue en outomatiese ... pipelines.
Van die mees noemenswaardige ondersoeke wat hierdie maand deur die Xygeni-sekuriteitspan gepubliseer is:
- JulesJacker, 'n meerfasige npm-wanwareveldtog wat Google se Jules KI-agent naboots om bewaarplekke te steel, te misbruik CI/CD omgewings, en selfs die sandput teiken wat dit ontleed. Die veldtog het geïnkripteerde gasheer-beheerde laaiers bekendgestel, vervalste
google-labs-jules[bot]commits, wolkmetadata-diefstal en Kubernetes-verkenning teen analise-infrastruktuur self. - PhantomBot, 'n kwaadwillige npm-veldtog wat vals beursies, blokketting- en Web3-gereedskap misbruik om geloofsbriewe te steel, ontwikkelaaromgewings in gevaar te stel en kripto-verwante werkvloeie te teiken deur afhanklikheidsmisbruik en gefaseerde vraglewering.
- 'n Grootskaalse kwaadwillige npm-ekosisteem wat vals TypeScript-hulpprogramme, KI-tema-pakkette, interne gereedskapnabootsing, frontend-biblioteke, wolkhelpers en bouerraamwerke misbruik om vingerafdrukomgewings te gebruik, geloofsbriewe te eksfiltreer, persistentie te ontplooi en ontwikkelaarstelsels in gevaar te stel.
- Voortgesette golwe van kwaadwillige pakkette wat afhanklikheidsverwarring, typosquatting, misbruik na installasie, KI-instrument-nabootsing, weergawe-inflasie en herhaalde naamruimtemisbruik benut, wat ontwerp is om ontwikkelaarvertroue-heuristiek te omseil en moderne algoritmes in gevaar te stel. SDLC werkvloeie voor opsporing.
- Die ontdekking van kruisplatform-wanwareveldtogte soos die
@jaggle/resizeobservesknipbordkapers, wat 'n wettige pakket nageboots het terwyl Python-gebaseerde volharding en kripto-beursie knipbordvervanging oor Linux-, macOS- en Windows-stelsels ontplooi is.
Dwarsdeur die maand het ons ook 'n groeiende konvergensie tussen KI-gereedskap, oopbron-ekosisteme en sagteware-voorsieningskettingaanvalle waargeneem. Bedreigingsakteurs het toenemend KI-ondersteunde ontwikkelingswerkvloeie, agentomgewings, kopilote en wolk-inheemse bou geteiken. pipelines as deel van breër geloofsbriewediefstal en bewaarplek-kompromietoperasies.
Hierdie aanvalle is nie meer geïsoleerde gevalle van eenvoudige typosquatting nie. Dit behels gekoördineerde publikasieveldtogte, outomatiese weergawe-uitbarstings, wolktoken-diefstal, CI/CD misbruik, geïnkripteerde vragopvoering, sandbox-ontduiking en aanhoudende kompromietegnieke wat spesifiek ontwerp is om in betroubare ontwikkelaar-ekosisteme in te smelt.
Hierdie maandelikse opdatering is deel van Xygeni se voortgesette navorsingsinisiatief oor wanware en voorsieningskettingbedreigings, waar ons span voortdurend kwaadwillige pakkette valideer, opkomende aanvalspatrone ondersoek en bruikbare intelligensie publiseer om sekuriteits-, AppSec- en DevSecOps-spanne te help om voor te bly op ontwikkelende voorsieningskettingrisiko.
Vir volledige konteks oor elke kwaadwillige pakket, wanware-veldtog en bedreigingsanalise wat hierdie maand gepubliseer is, verken die volledige Mei Malicious Code Digest en verwante navorsing van die Xygeni Security Team.
Week 4: Meer as 104 pakkette ontdek
| ekosisteem | pakket | datum |
|---|---|---|
| NPM | @gbrlxvii/ts-vorm-utils:4.6.0 | Mag 25, 2026 |
| NPM | @gbrlxvii/ts-vorm-utils:4.7.0 | Mag 25, 2026 |
| NPM | pi-ocr:0.2.0 | Mag 25, 2026 |
| NPM | @jaggle/resizeobserves:1.0.11 | Mag 25, 2026 |
| NPM | fnd-winkels:0.0.7 | Mag 25, 2026 |
| NPM | @gbrlxvii/ts-projek-lint:1.7.0 | Mag 25, 2026 |
| NPM | @gbrlxvii/ts-projek-lint:1.8.0 | Mag 25, 2026 |
| NPM | stelsel-gebruiker-identifiseerder-cli:7.0.0 | Mag 26, 2026 |
| NPM | @jaggle/resizeobserves:1.0.13 | Mag 26, 2026 |
| NPM | @jaggle/resizeobserves:1.0.12 | Mag 26, 2026 |
| NPM | @jaggle/resizeobserves:1.0.15 | Mag 26, 2026 |
| NPM | @jaggle/resizeobserves:1.0.14 | Mag 26, 2026 |
| NPM | @jaggle/resizeobserves:1.0.16 | Mag 26, 2026 |
| NPM | @jaggle/resizeobserves:1.0.19 | Mag 26, 2026 |
| NPM | @jaggle/resizeobserves:1.0.17 | Mag 26, 2026 |
| NPM | @jaggle/resizeobserves:1.0.18 | Mag 26, 2026 |
| NPM | @jaggle/resizeobserves:1.0.20 | Mag 26, 2026 |
| NPM | intl-advertensies:99.0.1 | Mag 26, 2026 |
| NPM | tempo-uitleg: 99.0.0 | Mag 26, 2026 |
| NPM | tempo-uitleg: 99.0.2 | Mag 26, 2026 |
| NPM | itc-akteurs-api:99.0.0 | Mag 26, 2026 |
| NPM | walmart-gedeelde-modules:99.0.1 | Mag 26, 2026 |
| NPM | wml-komponente:99.0.1 | Mag 26, 2026 |
| NPM | platform-tempo: 99.0.1 | Mag 26, 2026 |
| NPM | wml-kern:99.0.1 | Mag 26, 2026 |
| NPM | @izumiswap/sdk:3.0.3 | Mag 26, 2026 |
| NPM | @izumiswap/sdk:3.0.4 | Mag 26, 2026 |
| NPM | @izumiswap/sdk:3.0.5 | Mag 26, 2026 |
| NPM | json-na-eenvoudige-graphql-skema:1.0.0 | Mag 26, 2026 |
| NPM | reaktief-cdk-app:1.0.1 | Mag 27, 2026 |
| NPM | mmt-staties:1.0.0 | Mag 27, 2026 |
| NPM | reaktief-cdk-app:1.0.4 | Mag 27, 2026 |
| NPM | cdk-saliemaker-nieebook-werkvloei: 1.0.3 | Mag 27, 2026 |
| NPM | ontdekking-bou:1.0.0 | Mag 27, 2026 |
| pypi | wêreldvankanga:1.0.4 | Mag 27, 2026 |
| NPM | smee-jsxy:1.0.92 | Mag 27, 2026 |
| NPM | @gs-select/spaar-kliënt-toepassing:99.0.0 | Mag 27, 2026 |
| NPM | smee-jsxy:1.0.105 | Mag 27, 2026 |
| NPM | smee-jsxy:1.0.107 | Mag 27, 2026 |
| NPM | smee-jsxy:1.0.108 | Mag 27, 2026 |
| NPM | redaksionele-mse-verifikasie-ui:99.0.1 | Mag 28, 2026 |
| NPM | redaksionele kode: 99.0.1 | Mag 28, 2026 |
| NPM | mse-gereedskap-komponente:99.99.100 | Mag 28, 2026 |
| NPM | smee-jsxy:1.0.120 | Mag 28, 2026 |
| NPM | @gbrlxvi/ts-vorm-utils:1.0.0 | Mag 29, 2026 |
| vskode | rudranex-ontwikkelaar-assistent: 1.0.1 | Mag 29, 2026 |
| NPM | nemo-verslaggewer:1.8.2 | Mag 29, 2026 |
| NPM | @qlab/ui:2.0.5 | Mag 29, 2026 |
| NPM | smee-jsxy:1.0.121 | Mag 29, 2026 |
| NPM | @qlab/ui:2.0.6 | Mag 29, 2026 |
| NPM | @qlab/komponent-intelligensie:2.0.6 | Mag 29, 2026 |
| NPM | soekenjin-opstelling: 1.0.9106 | Mag 29, 2026 |
| NPM | opensearch-opstel-instrument:1.0.9107 | Mag 29, 2026 |
| NPM | @0xlr/vercel-analise:999.0.0 | Mag 29, 2026 |
| NPM | @0xlr/streep-voorkant:999.0.0 | Mag 29, 2026 |
| NPM | @0xlr/streep-afhandeling-js:999.0.0 | Mag 29, 2026 |
| NPM | @0xlr/sentry-web:999.0.0 | Mag 29, 2026 |
| NPM | @0xlr/klerk-outeur:999.0.0 | Mag 29, 2026 |
| NPM | @0xlr/supabase-db:999.0.0 | Mag 29, 2026 |
| NPM | @0xlr/prisma-kliënt-js:999.0.0 | Mag 29, 2026 |
| NPM | @flexspec/cli:0.3.1-dev.26612027722 | Mag 29, 2026 |
| NPM | @cloudplatform-single-spa/administrasie:99.99.100 | Mag 30, 2026 |
| NPM | @cloudplatform-single-spa/svp-s3-berging:99.99.100 | Mag 30, 2026 |
| NPM | @maximvs1538/os-npm:99.0.0 | Mag 30, 2026 |
| NPM | @maklike-toegangs-/landingsroetes:99.9.5 | Mag 30, 2026 |
| NPM | @maklike-toegang/buite-registrasie-fop-navigator:99.9.5 | Mag 30, 2026 |
| NPM | @maklike-toegang/roetes:99.9.5 | Mag 30, 2026 |
| NPM | cms-github:4.2.4 | Mag 30, 2026 |
| NPM | @t-in-een/vorm_produk_teken:5.7.1 | Mag 30, 2026 |
| NPM | @capibar.chat/ui-kit:99.5.7 | Mag 30, 2026 |
| NPM | cms-helpgit:4.2.6 | Mag 30, 2026 |
| NPM | cms-helpgit:4.2.8 | Mag 30, 2026 |
| vskode | xampp-bestuurder:5.1.3 | Mag 30, 2026 |
| NPM | @klets-sjabloon/outoriteit:1.0.0 | Mag 31, 2026 |
| NPM | cms-winkelhub:1.3.4 | Mag 31, 2026 |
| NPM | cms-winkelhub:1.3.5 | Mag 31, 2026 |
| NPM | kleinhandel-liggingstrategie-voorkant: 1.1.1 | Mag 31, 2026 |
| NPM | kleinhandel-liggingstrategie-voorkant: 1.1.2 | Mag 31, 2026 |
| NPM | cms-winkelhub:1.3.6 | Mag 31, 2026 |
| pypi | simtooreal-cli:0.3.0 | Junie 01, 2026 |
| NPM | conversa-sdk:2.0.2 | Junie 01, 2026 |
| NPM | veltrix:9.0.0 | Junie 01, 2026 |
| NPM | jingmeideshishi:1.0.4 | Junie 01, 2026 |
| NPM | @tse-digitaal/kern:99.0.0 | Junie 01, 2026 |
| NPM | @telenor-se/kern:99.0.0 | Junie 01, 2026 |
| NPM | @ownit/kern:99.0.0 | Junie 01, 2026 |
| NPM | jingmeideshishi:1.0.5 | Junie 01, 2026 |
| NPM | pasiëntdokumente: 75.0.0 | Junie 01, 2026 |
| NPM | @antoncallahan/aws-gebruiker-helper:6767.67.69 | Junie 01, 2026 |
| NPM | @antoncallahan/aws-gebruiker-helper:6767.67.68 | Junie 01, 2026 |
| NPM | @antoncallahan/aws-gebruiker-helper:6767.67.82 | Junie 01, 2026 |
| NPM | @antoncallahan/aws-gebruiker-helper:6767.67.80 | Junie 01, 2026 |
| NPM | @antoncallahan/aws-gebruiker-helper:6767.67.81 | Junie 01, 2026 |
| NPM | @antoncallahan/aws-gebruiker-helper:6767.67.83 | Junie 01, 2026 |
| NPM | @antoncallahan/aws-gebruiker-helper:6767.67.3 | Junie 01, 2026 |
| NPM | veltrix:9.0.1 | Junie 01, 2026 |
| NPM | @emcd-vue/outoriteit:6.4.9 | Junie 01, 2026 |
| NPM | @emcd-vue/b2b-betaalvorm:5.7.4 | Junie 01, 2026 |
Week 3: Meer as 106 pakkette ontdek
| ekosisteem | pakket | datum |
|---|---|---|
| NPM | ersliefde:1.22.12 | Mag 16, 2026 |
| NPM | dit-omgewing:17.4.2 | Mag 16, 2026 |
| NPM | briantreehttp:0.4.0 | Mag 16, 2026 |
| NPM | cheaty-sync-bot:1.0.0 | Mag 16, 2026 |
| oopvsx | bingcha/bcai-gereedskap:4.0.35 | Mag 16, 2026 |
| NPM | hallo-wêreld-pkg-waarde-waarde-p:1.0.11 | Mag 16, 2026 |
| NPM | hallo-wêreld-pkg-waarde-waarde-p:1.0.8 | Mag 16, 2026 |
| NPM | hallo-wêreld-pkg-waarde-waarde-p:1.0.9 | Mag 16, 2026 |
| NPM | hallo-wêreld-pkg-waarde-waarde-p:1.0.12 | Mag 16, 2026 |
| NPM | axois-utils:1.0.6 | Mag 16, 2026 |
| NPM | axois-utils:1.0.4 | Mag 16, 2026 |
| NPM | venturo-dramaturg-kern:1.0.8 | Mag 16, 2026 |
| NPM | kryt-sjabloon: 1.0.16 | Mag 16, 2026 |
| NPM | kryt-sjabloon: 1.0.14 | Mag 16, 2026 |
| NPM | kryt-sjabloon: 1.0.20 | Mag 17, 2026 |
| NPM | kryt-sjabloon: 1.0.19 | Mag 17, 2026 |
| NPM | axois-utils:1.0.9 | Mag 17, 2026 |
| NPM | @rocketreach/rr-komponente:9999.0.0 | Mag 17, 2026 |
| NPM | @cplace-paw-fe/cf-opleiding-uitgebreid:2.0.4 | Mag 18, 2026 |
| NPM | smtp-toets-bediener-node:99.2.1 | Mag 18, 2026 |
| NPM | smtp-toets-bediener-node:99.2.2 | Mag 18, 2026 |
| NPM | @lir-portaal/web-komponente:2.0.4 | Mag 18, 2026 |
| NPM | @zentrafinance/kontrakte:1.0.3 | Mag 18, 2026 |
| NPM | @zentrafinance/protokol-konfigurasie:1.0.3 | Mag 18, 2026 |
| NPM | @zentrafinance/sdk:1.0.3 | Mag 18, 2026 |
| NPM | @zentrafinance/tipes:1.0.3 | Mag 18, 2026 |
| NPM | @zentrafinance/tipes:1.0.5 | Mag 18, 2026 |
| NPM | @zentrafinance/protokol-konfigurasie:1.0.6 | Mag 18, 2026 |
| NPM | @zentrafinance/sdk:1.0.6 | Mag 18, 2026 |
| NPM | @zentrafinance/tipes:1.0.7 | Mag 18, 2026 |
| NPM | clementine-sdk:2.0.0 | Mag 18, 2026 |
| NPM | citrea-utils:2.0.0 | Mag 18, 2026 |
| NPM | @zentrafinance/protokol-konfigurasie:2.0.1 | Mag 18, 2026 |
| NPM | @zentrafinance/sdk:2.0.0 | Mag 18, 2026 |
| NPM | @zentrafinance/tipes:2.0.1 | Mag 18, 2026 |
| NPM | @zentrafinance/tipes:2.0.0 | Mag 18, 2026 |
| NPM | bui-reageer-10hooks: 99.0.0 | Mag 18, 2026 |
| NPM | bui-react-10komponente:99.0.0 | Mag 18, 2026 |
| NPM | @deadcode09284814/axios-util:1.0.1 | Mag 18, 2026 |
| NPM | @deadcode09284814/axios-util:1.0.0 | Mag 18, 2026 |
| NPM | kleur-styl-utils:1.0.7 | Mag 18, 2026 |
| NPM | node-env-resolve:1.2.0 | Mag 18, 2026 |
| NPM | @easytipsportal/node-helper:1.0.1 | Mag 18, 2026 |
| NPM | @zentrafinance/kontrakte:2.0.2 | Mag 18, 2026 |
| NPM | citrea-sdk:2.0.2 | Mag 18, 2026 |
| NPM | clementine-sdk:2.0.2 | Mag 18, 2026 |
| NPM | citrea-brug:2.0.2 | Mag 18, 2026 |
| NPM | citrea-utils:2.0.2 | Mag 18, 2026 |
| NPM | @zentrafinance/tipes:2.0.2 | Mag 18, 2026 |
| NPM | apexomni-node:1.0.0 | Mag 19, 2026 |
| NPM | toppunt-handel: 1.0.0 | Mag 19, 2026 |
| NPM | toppunt-handel: 1.0.1 | Mag 19, 2026 |
| NPM | apex-verbinding: 1.0.4 | Mag 19, 2026 |
| NPM | apexpro-node:1.0.2 | Mag 19, 2026 |
| NPM | apex-verbinding: 1.0.3 | Mag 19, 2026 |
| NPM | apexomni-node:1.0.2 | Mag 19, 2026 |
| NPM | toppunt-handel: 1.0.2 | Mag 19, 2026 |
| NPM | apexpro-node:1.0.3 | Mag 19, 2026 |
| NPM | smee-jsxy:1.0.81 | Mag 19, 2026 |
| NPM | smee-jsxy:1.0.90 | Mag 19, 2026 |
| NPM | sekelwikkelaar: 0.2.1 | Mag 20, 2026 |
| NPM | @doctolib-apps/inheemse-gepersonaliseerde-dienste:99.99.99 | Mag 21, 2026 |
| NPM | @doctolib-apps/inheemse-gepersonaliseerde-dienste:1.0.0 | Mag 21, 2026 |
| NPM | @doctolib-apps/inheemse-gepersonaliseerde-dienste:1.0.1 | Mag 21, 2026 |
| pypi | kanga-hack:1.0.4 | Mag 21, 2026 |
| pypi | libhmac:0.8.28.1 | Mag 21, 2026 |
| NPM | @limebike/supreme-data-grid:85.14.44 | Mag 21, 2026 |
| NPM | @limebike/supreme-date-pickers:85.14.44 | Mag 21, 2026 |
| NPM | @limebike/supreme-data-grid:85.14.48 | Mag 21, 2026 |
| pypi | ai-prishtina-agentic-kag:0.1.0 | Mag 21, 2026 |
| NPM | hehehe:1.0.7 | Mag 21, 2026 |
| NPM | defi-bedreiging-skandeerder:2.1.2 | Mag 22, 2026 |
| NPM | ontplooiing-sleutel-ouditeur: 0.7.3 | Mag 22, 2026 |
| NPM | eth-wallet-sentinel:1.0.9 | Mag 22, 2026 |
| NPM | web3-geheime-opsporer:1.2.6 | Mag 22, 2026 |
| NPM | soliditeit-ontplooi-wag: 0.4.4 | Mag 22, 2026 |
| NPM | mnemoniese-veiligheidskontrole:0.5.2 | Mag 22, 2026 |
| NPM | kripto-geloofsbrief-skandeerder: 2.0.2 | Mag 22, 2026 |
| NPM | ketting-sleutel-valideerder: 0.2.3 | Mag 22, 2026 |
| NPM | ketting-sleutel-valideerder: 0.2.4 | Mag 22, 2026 |
| NPM | defi-omgewing-ouditeur:0.3.3 | Mag 22, 2026 |
| NPM | ontplooiing-sleutel-ouditeur: 1.8.2 | Mag 22, 2026 |
| NPM | defi-omgewing-ouditeur:1.4.2 | Mag 22, 2026 |
| NPM | soliditeit-ontplooi-wag: 1.5.2 | Mag 22, 2026 |
| NPM | beursie-sekuriteitskontroleerder: 2.1.3 | Mag 22, 2026 |
| NPM | soliditeit-ontplooi-wag: 1.5.3 | Mag 22, 2026 |
| NPM | @jaggle/resizeobserves:1.0.1 | Mag 22, 2026 |
| NPM | @jaggle/resizeobserves:1.0.3 | Mag 22, 2026 |
| NPM | @jaggle/resizeobserves:1.0.2 | Mag 22, 2026 |
| NPM | @jaggle/resizeobserves:1.0.5 | Mag 22, 2026 |
| NPM | @jaggle/resizeobserves:1.0.6 | Mag 22, 2026 |
| NPM | defi-bedreiging-skandeerder:3.2.5 | Mag 22, 2026 |
| NPM | defi-bedreiging-skandeerder:3.2.4 | Mag 22, 2026 |
| NPM | defi-omgewing-ouditeur:1.4.9 | Mag 22, 2026 |
| NPM | web3-geheime-opsporer:2.3.6 | Mag 22, 2026 |
| NPM | beursie-sekuriteitskontroleerder: 2.1.6 | Mag 22, 2026 |
| NPM | mnemoniese-veiligheidskontrole:4.0.0 | Mag 22, 2026 |
| NPM | eth-wallet-sentinel:4.0.0 | Mag 22, 2026 |
| NPM | @jaggle/resizeobserves:1.0.7 | Mag 22, 2026 |
| NPM | @jaggle/resizeobserves:1.0.8 | Mag 22, 2026 |
| NPM | @jaggle/resizeobserves:1.0.4 | Mag 22, 2026 |
Week 2: Meer as 95 pakkette ontdek
| ekosisteem | pakket | datum |
|---|---|---|
| NPM | wen-omgewing-opstelling:3.0.5 | Mag 11, 2026 |
| NPM | reageer-ikoon-svgs:1.0.1 | Mag 11, 2026 |
| NPM | geld-das-oop-rpc:201.99.100 | Mag 11, 2026 |
| NPM | bedienerlose-omgewing-hulpmiddels:1.0.0 | Mag 11, 2026 |
| NPM | bedienerlose-omgewing-hulpmiddels:1.0.2 | Mag 11, 2026 |
| NPM | bedienerlose-omgewing-hulpmiddels:1.0.3 | Mag 11, 2026 |
| NPM | sahrbrucekode32:1.0.0 | Mag 11, 2026 |
| NPM | klou_boodskapper:0.0.71 | Mag 11, 2026 |
| NPM | @gbrlxvii/ts-vorm-utils:2.7.0 | Mag 11, 2026 |
| NPM | na-aankoop-bundelaar: 99.9.19 | Mag 11, 2026 |
| NPM | na-aankoop-bundelaar: 99.9.26 | Mag 11, 2026 |
| NPM | na-aankoop-bundelaar: 100.0.1 | Mag 11, 2026 |
| NPM | na-aankoop-bundelaar: 101.0.3 | Mag 11, 2026 |
| NPM | rsflows-pexml:99.9.15 | Mag 11, 2026 |
| NPM | rsflows-pexml:99.9.20 | Mag 11, 2026 |
| NPM | na-aankoop-bundelaar: 102.0.3 | Mag 11, 2026 |
| NPM | rsflows-pexml:99.9.25 | Mag 11, 2026 |
| NPM | na-aankoop-bundelaar: 1.99.0 | Mag 11, 2026 |
| NPM | stadige-surf:10.0.0 | Mag 11, 2026 |
| NPM | ersliefde:1.22.12 | Mag 11, 2026 |
| NPM | dit-omgewing:17.4.2 | Mag 11, 2026 |
| NPM | hehehe:1.0.4 | Mag 11, 2026 |
| NPM | @gbrlxvii/ts-vorm-utils:3.7.0 | Mag 11, 2026 |
| NPM | klou_boodskapper:0.0.74 | Mag 11, 2026 |
| oopvsx | whatwedo/takkie:1.2.7 | Mag 11, 2026 |
| oopvsx | george-alisson/html-voorskou-vskode:1.2.7 | Mag 11, 2026 |
| oopvsx | sohibe/java-genereer-setters-getters:9.0.2 | Mag 11, 2026 |
| NPM | deurverskaffers:99.0.6 | Mag 11, 2026 |
| NPM | briantreehttp:0.4.0 | Mag 11, 2026 |
| NPM | middag-kontrakte: 1.0.0 | Mag 12, 2026 |
| NPM | @draftlab/db:0.16.1 | Mag 12, 2026 |
| NPM | @uipath/uipath-python-brug:1.0.1 | Mag 12, 2026 |
| NPM | @uipath/aops-beleid-instrument:0.3.1 | Mag 12, 2026 |
| NPM | @uipath/kodedagent-gereedskap:1.0.1 | Mag 12, 2026 |
| NPM | @uipath/gov-tool:0.3.1 | Mag 12, 2026 |
| NPM | @uipath/telemetrie:0.0.7 | Mag 12, 2026 |
| NPM | @uipath/admin-gereedskap:0.1.1 | Mag 12, 2026 |
| NPM | @uipath/codedapp-gereedskap:1.0.1 | Mag 12, 2026 |
| NPM | @uipath/insights-sdk:1.0.1 | Mag 12, 2026 |
| NPM | @uipath/gereedskap-werkvloeikompiler:0.0.12 | Mag 12, 2026 |
| NPM | @uipath/projek-verpakker:1.1.16 | Mag 12, 2026 |
| NPM | @uipath/toegangsbeleid-sdk:0.3.1 | Mag 12, 2026 |
| NPM | @uipath/vertikale-oplossings-instrument:1.0.1 | Mag 12, 2026 |
| NPM | @uipath/integrationservice-sdk:1.0.2 | Mag 12, 2026 |
| NPM | @uipath/toegangsbeleid-instrument:0.3.1 | Mag 12, 2026 |
| NPM | @uipath/hulpbronkatalogus-instrument:0.1.1 | Mag 12, 2026 |
| NPM | @uipath/agent-instrument:1.0.1 | Mag 12, 2026 |
| NPM | @uipath/api-werkvloei-instrument:1.0.1 | Mag 12, 2026 |
| NPM | @uipath/taak-gereedskap:1.0.1 | Mag 12, 2026 |
| NPM | @uipath/oplossingsinstrument:1.0.1 | Mag 12, 2026 |
| NPM | @uipath/vss:0.1.6 | Mag 12, 2026 |
| NPM | @tallyui/komponente:1.0.1 | Mag 12, 2026 |
| NPM | @squawk/vlug-wiskunde:0.5.4 | Mag 12, 2026 |
| NPM | @squawk/weer:0.5.6 | Mag 12, 2026 |
| NPM | @mistralai/mistralai-gcp:1.7.1 | Mag 12, 2026 |
| NPM | @mesadev/saguaro:0.4.22 | Mag 12, 2026 |
| NPM | dpdgroepuk:0.0.1 | Mag 12, 2026 |
| NPM | @cplace-paw-fe/cf-opleiding-uitgebreid:2.0.4 | Mag 12, 2026 |
| NPM | @jacobson1977/hp-opstelling:2.0.2 | Mag 14, 2026 |
| NPM | @jacobson1977/hp-opstelling:2.0.5 | Mag 14, 2026 |
| NPM | @jacobson1977/hp-opstelling:2.0.6 | Mag 14, 2026 |
| NPM | @jacobson1977/hp-opstelling:2.0.7 | Mag 14, 2026 |
| NPM | @jacobson1977/hp-opstelling:2.0.8 | Mag 14, 2026 |
| NPM | @jacobson1977/hp-opstelling:2.0.9 | Mag 14, 2026 |
| NPM | @jacobson1977/hp-opstelling:2.1.0 | Mag 14, 2026 |
| NPM | hpsetup:4.0.1 | Mag 14, 2026 |
| NPM | hpsetup:4.0.2 | Mag 14, 2026 |
| NPM | hpsetup:4.1.0 | Mag 14, 2026 |
| NPM | hpsetup:4.1.3 | Mag 14, 2026 |
| NPM | hpsetup:4.1.4 | Mag 14, 2026 |
| NPM | hpsetup:4.1.5 | Mag 14, 2026 |
| NPM | hpsetup:4.1.6 | Mag 14, 2026 |
| NPM | hpsetup:4.1.8 | Mag 14, 2026 |
| NPM | hpsetup:4.1.19 | Mag 14, 2026 |
| NPM | hpsetup:4.1.20 | Mag 14, 2026 |
| NPM | hpsetup:4.2.0 | Mag 14, 2026 |
| NPM | huisoproeppro:1.0.1 | Mag 14, 2026 |
| pypi | ai-speltoetsers: 1.0.0 | Mag 14, 2026 |
| pypi | sikade-tg:0.3.6 | Mag 14, 2026 |
| NPM | smtp-toets-bediener-node:99.2.1 | Mag 14, 2026 |
| NPM | smtp-toets-bediener-node:99.2.2 | Mag 14, 2026 |
| NPM | @lir-portaal/web-komponente:2.0.4 | Mag 14, 2026 |
| NPM | dotenvv-gereedskap:1.0.1 | Mag 14, 2026 |
| NPM | rimraf-utils:1.0.1 | Mag 14, 2026 |
| NPM | expresspress-gereedskap:1.0.0 | Mag 14, 2026 |
| NPM | expresspress-gereedskap:1.0.1 | Mag 14, 2026 |
| NPM | expresspress-utils:1.0.1 | Mag 14, 2026 |
| NPM | @ontwerp-stelsel-coopeuch/web:999.0.4 | Mag 14, 2026 |
| NPM | @ontwerp-stelsel-coopeuch/web:999.0.3 | Mag 14, 2026 |
| NPM | @ontwerp-stelsel-coopeuch/web:999.0.2 | Mag 14, 2026 |
| pypi | pyexecutorsme:0.1.0 | Mag 15, 2026 |
| pypi | pyexecutorsme:0.1.2 | Mag 15, 2026 |
| NPM | hallo-wêreld-pkg-waarde-waarde-p:1.0.7 | Mag 15, 2026 |
| NPM | hallo-wêreld-pkg-waarde-waarde-p:1.0.10 | Mag 15, 2026 |
| NPM | akson-enterprise: 1.0.0 | Mag 15, 2026 |
Week 1: Meer as 158 pakkette ontdek
| ekosisteem | pakket | datum |
|---|---|---|
| NPM | @apple-pay-trust/gekanselleer:99.0.3 | Mag 01, 2026 |
| NPM | apple-interne-sekuriteitsbiblioteek-v99:100.0.1 | Mag 01, 2026 |
| NPM | fiat-token-admin:99.1.1 | Mag 01, 2026 |
| NPM | stellar-stablecoin-skripte:99.1.0 | Mag 01, 2026 |
| NPM | node-red-contrib-fox-control-admin:2.0.3 | Mag 01, 2026 |
| NPM | node-red-contrib-fox-control-admin:2.0.4 | Mag 01, 2026 |
| NPM | node-red-contrib-fox-control-admin:2.0.7 | Mag 01, 2026 |
| NPM | swartbaard-navigator:211.0.0 | Mag 01, 2026 |
| NPM | swartbaard-navigator:212.0.0 | Mag 01, 2026 |
| NPM | swartbaard-navigator:213.0.0 | Mag 01, 2026 |
| NPM | swartbaard-navigator:217.0.0 | Mag 01, 2026 |
| NPM | swartbaard-navigator:220.0.0 | Mag 01, 2026 |
| NPM | swartbaard-navigator:221.0.0 | Mag 01, 2026 |
| NPM | swartbaard-navigator:222.0.0 | Mag 01, 2026 |
| NPM | sirenes-klaaglied:211.0.0 | Mag 01, 2026 |
| NPM | sirenes-klaaglied:212.0.0 | Mag 01, 2026 |
| NPM | sirenes-klaaglied:213.0.0 | Mag 01, 2026 |
| NPM | buskruit-spook:212.0.0 | Mag 01, 2026 |
| NPM | buskruit-spook:219.0.0 | Mag 01, 2026 |
| NPM | kodewhisperer-stroom: 1.0.15 | Mag 02, 2026 |
| NPM | shadxino:1.0.5 | Mag 02, 2026 |
| NPM | amazon-data-kiosk-monorepo:1.0.10 | Mag 02, 2026 |
| NPM | claude-kode-beste:2.0.1 | Mag 03, 2026 |
| NPM | apexpro:99.99.99 | Mag 03, 2026 |
| NPM | apexomni:99.99.99 | Mag 03, 2026 |
| NPM | apexomni:99.99.100 | Mag 03, 2026 |
| NPM | apexpro:99.99.100 | Mag 03, 2026 |
| NPM | node-env-resolve:1.0.7 | Mag 03, 2026 |
| NPM | node-env-resolve:1.0.8 | Mag 03, 2026 |
| NPM | @xp-nutsdienste/web:99.0.0 | Mag 03, 2026 |
| NPM | nextjs-gesels-met-ai-diens:99.9.9 | Mag 03, 2026 |
| NPM | @alfa.life.mapp/app.web:99.0.13 | Mag 04, 2026 |
| NPM | @alfa.life.mapp/app.web:99.0.14 | Mag 04, 2026 |
| NPM | @alfa.life.mapp/app.web:99.0.15 | Mag 04, 2026 |
| NPM | @alfa.life.mapp/app.web:99.0.16 | Mag 04, 2026 |
| NPM | @alfa.life.mapp/app.web:99.0.17 | Mag 04, 2026 |
| NPM | @alfa.life.mapp/app.web:99.0.19 | Mag 04, 2026 |
| NPM | @sbt_gitverse/analytics-client:99.0.1 | Mag 04, 2026 |
| NPM | @sbt_gitverse/analytics-client:99.0.4 | Mag 04, 2026 |
| NPM | @sbt_gitverse/analytics-client:99.0.5 | Mag 04, 2026 |
| NPM | @tochka-ui/stigting:99.0.2 | Mag 04, 2026 |
| NPM | @tochka-ui/stigting:99.0.3 | Mag 04, 2026 |
| NPM | @tochka-ui/stigting:99.0.4 | Mag 04, 2026 |
| NPM | kl-b2c-ui-kit:99.0.1 | Mag 04, 2026 |
| NPM | kl-b2c-ui-kit:99.0.2 | Mag 04, 2026 |
| NPM | kl-b2c-ui-kit:99.0.3 | Mag 04, 2026 |
| NPM | pi-exa-mcp:99.9.11 | Mag 04, 2026 |
| NPM | pi-exa-mcp:99.9.12 | Mag 04, 2026 |
| NPM | google-wolk-geheime-bestuurder-konfigurasie-poc:99.9.26 | Mag 04, 2026 |
| NPM | google-wolk-geheime-bestuurder-konfigurasie-poc:99.9.33 | Mag 04, 2026 |
| NPM | google-wolk-geheime-bestuurder-konfigurasie-poc:99.9.34 | Mag 04, 2026 |
| NPM | google-wolk-geheime-bestuurder-konfigurasie-poc:99.9.35 | Mag 04, 2026 |
| NPM | google-wolk-geheime-bestuurder-konfigurasie-poc:99.9.37 | Mag 04, 2026 |
| NPM | google-wolk-geheime-bestuurder-konfigurasie-poc:99.9.38 | Mag 04, 2026 |
| NPM | google-wolk-geheime-bestuurder-konfigurasie-poc:99.9.51 | Mag 04, 2026 |
| NPM | google-wolk-geheime-bestuurder-konfigurasie-poc:99.9.53 | Mag 04, 2026 |
| NPM | paypal-uitbetalings-brug:99.9.9 | Mag 04, 2026 |
| NPM | paypal-uitbetalings-brug:100.1.1 | Mag 04, 2026 |
| NPM | paypal-uitbetalings-brug:100.1.4 | Mag 04, 2026 |
| NPM | paypal-uitbetalings-brug:100.1.6 | Mag 04, 2026 |
| NPM | paypal-uitbetalings-brug:100.1.9 | Mag 04, 2026 |
| NPM | paypal-uitbetalings-brug:100.2.8 | Mag 04, 2026 |
| NPM | microsoft-werknemer-ervaring:99.2.2 | Mag 05, 2026 |
| NPM | karp-skild:0.1.0 | Mag 05, 2026 |
| NPM | fanduel:100.5.0 | Mag 05, 2026 |
| NPM | exiouss:1.0.6 | Mag 05, 2026 |
| NPM | enterprise-outeurskap-poort-kern:50.50.50 | Mag 06, 2026 |
| NPM | @saif777/kodespieël5:7.66.4 | Mag 06, 2026 |
| NPM | @saif777/kodespieël5:7.66.5 | Mag 06, 2026 |
| NPM | kenmerk-vlag-diens:2.0.1 | Mag 06, 2026 |
| NPM | kenmerk-vlag-diens:2.0.2 | Mag 06, 2026 |
| NPM | kenmerk-vlag-diens:2.0.3 | Mag 06, 2026 |
| NPM | sorteer-btree:2.1.2 | Mag 06, 2026 |
| NPM | viem-kern:1.0.0 | Mag 06, 2026 |
| NPM | viem-utils-kern:1.0.0 | Mag 06, 2026 |
| NPM | hardhat-kern-hulpmiddels:1.0.0 | Mag 06, 2026 |
| NPM | veltrix:1.0.0 | Mag 06, 2026 |
| NPM | evm-utils:1.0.0 | Mag 06, 2026 |
| NPM | web3-utils-kern:1.0.0 | Mag 06, 2026 |
| NPM | gietery-hulpmiddels: 1.0.0 | Mag 06, 2026 |
| NPM | carboniteapp:99.9.0 | Mag 07, 2026 |
| NPM | karboniet-intern: 99.9.0 | Mag 07, 2026 |
| NPM | geld-das-oop-rpc:200.99.100 | Mag 07, 2026 |
| NPM | 24712-pl5006:0.0.1 | Mag 07, 2026 |
| oopvsx | eriklynd/json-gereedskap:20.1.2 | Mag 07, 2026 |
| NPM | invixco:1.0.4 | Mag 07, 2026 |
| NPM | wen-sys-gesondheid-agent:1.0.2 | Mag 08, 2026 |
| NPM | wen-omgewing-opstelling:3.0.6 | Mag 08, 2026 |
| NPM | wen-sys-gesondheid-agent:1.0.3 | Mag 08, 2026 |
Beveilig u sagteware-voorsieningsketting teen kwesbaarhede en kwaadwillige kode
Aanvalle op sagtewarevoorsieningskettings is nie meer teoretiese bedreigings nie. Kwaadwillige pakkette, KI-bewuste wanware, afhanklikheidsverwarringsaanvalle, geloofsbriewediefstal en vergiftigde ontwikkelaarsgereedskap teiken aktief moderne ... SDLCs, CI/CD pipelines, en KI-ondersteunde ontwikkelingsomgewings.
Met Xygeni se vroeë wanware-opsporing en software supply chain security platform, kan organisasies kwaadwillige afhanklikhede identifiseer en blokkeer voordat hulle ontwikkelaarswerkstasies, boustelsels of produksie bereik pipelines.
Xygeni monitor voortdurend ekosisteme soos npm, PyPI, VS Code en OpenVSX om kwaadwillige pakkette, verdagte publikasiepatrone, typosquatting, naamruimtemisbruik, geloofsbriewediefstal en KI-gedrewe voorsieningskettingbedreigings intyds op te spoor. Bevindinge word outomaties geprioritiseer op grond van benutbaarheid, bereikbaarheid en operasionele impak sodat spanne kan fokus op die risiko's wat werklik saak maak.
Van kwaadwillige npm-pakkette en gekompromitteerde OSS-afhanklikhede tot KI-gegenereerde koderisiko's en vergiftigde ontwikkelaarsgereedskap, help Xygeni sekuriteits- en ingenieurspanne om sigbaarheid, vertroue en beheer oor die moderne sagteware-voorsieningsketting te handhaaf.
Om die nuutste wanware-veldtogte en gevalideerde kwaadwillige pakkette wat deur die Xygeni-sekuriteitspan ontdek is, te verken, besoek die volledige Kwaadwillige Kode-oorsig.
Bly veilig. Bly vinnig. Bly in beheer met Xygeni.
