As every week, our malware detection systems scan thousands of new and updated packages across public registries. We confirmed 27 malicious package versions between October 9 and 15, 2026: 18 on npm and 9 on PyPI. Xygeni confirmed 18 of them.
Baileys Under New Names
Ten versions carried the Baileys name or a variant of it. @dcloude/baileys shipped four versions between October 10 and 14, @xmiybi/baileys two, and @ungke/baileys, @corexium/xbails, @kxafunc/xbails and cloud-baileys one each.
Inflated Versions
On October 10, within five minutes, kmf-bootstrap, kmf-vendor-pack and deposit-limit-fe were confirmed at 100.100.106, along with kmf-bootstrap at 100.100.100. react-dropzone-v4 followed on October 11 at 99.0.0.
PyPI
Six versions of minecraftaccfinder, from 0.1.1 to 3.0.0, were confirmed in the same minute on October 12. pyyi appeared in three versions between October 12 and 15, alongside py2ops.
This weekly snapshot is part of our ongoing Malicious Code Digest, where we validate new threats to help DevSecOps teams protect their pipelines before damage occurs.
The Full List: 27 Confirmed Malicious Package Versions
Same Library, New Names: 27 Malicious Package Versions This Week
Fewer versions than last week, but the same patterns. Ten Baileys versions appeared under six different names, so blocking a single package name doesn’t cover them. Four packages were pushed to 100.100.x within five minutes, and six PyPI versions of the same package were confirmed in a single minute. Of the 27 versions, Xygeni confirmed 18.
Xygeni Malware Early Warning monitors npm, PyPI, Maven, Composer, OpenVSX, and other registries in real time, flagging threats at publication, before they reach a build. Xygeni’s Open Source Security platform adds the prioritization DevSecOps teams need to act on the ones that matter first.
