Xygeni Malicious Code Digest 67

Every week, our malware detection systems scan thousands of new and updated packages across public registries like npm and PyPI.

This week was especially active.

We confirmed 220 malicious packages spanning npm, PyPI, VS Code, and OpenVSX. Several of them appeared in coordinated clusters, with repeated malicious releases published under the same names or across closely related package families. Many impersonated AI utilities, enterprise-facing modules, internal tooling, SDKs, frontend components, and developer workflow packages.

Beyond confirming 220 malicious packages, this week also reinforced broader software supply chain patterns we have been tracking, including:

• LiteLLM Supply Chain Attack: compromised security tooling was used to backdoor AI infrastructure

These were not isolated anomalies. What stood out this week was the scale of repeated publication, the reuse of naming patterns, and the way malicious packages were positioned to look like legitimate dependencies inside real software delivery pipelines.

This weekly snapshot is part of our ongoing Malicious Code Digest, where we validate new threats and provide actionable intelligence to help DevSecOps teams protect their pipelines before damage occurs.

Let’s break down what we found this week and why it matters.