As every week, our malware detection systems scan thousands of new and updated packages across public registries. We confirmed 10 malicious package versions between October 18 and 21, 2026: 3 on npm and 7 on PyPI. Xygeni confirmed 9 of them.
pyyi Keeps Coming Backpyyi, already seen last week, shipped six more versions, from 2.5.0 to 2.5.5. Five of them were confirmed on October 21 within 22 minutes.
Baileys and Inflated Versions, Again
The Baileys pattern continued with @kimmcloude/baileys on October 18, and memories-core-web appeared on October 20 at an inflated 99.0.0.
Also Confirmedrootaccessxvv-bbmarker on npm and leakdeep on PyPI, the latter confirmed by the registry.
This weekly snapshot is part of our ongoing Malicious Code Digest, where we validate new threats to help DevSecOps teams protect their pipelines before damage occurs.
The Full List: 10 Confirmed Malicious Package Versions
| Ecosystem | Package | Date |
|---|---|---|
| npm | rootaccessxvv-bbmarker:1.0.2 | October 18, 2026 |
| npm | @kimmcloude/baileys:1.0.0 | October 18, 2026 |
| pypi | leakdeep:3.0.0 | October 19, 2026 |
| pypi | pyyi:2.5.0 | October 19, 2026 |
| npm | memories-core-web:99.0.0 | October 20, 2026 |
| pypi | pyyi:2.5.1 | October 21, 2026 |
| pypi | pyyi:2.5.2 | October 21, 2026 |
| pypi | pyyi:2.5.3 | October 21, 2026 |
| pypi | pyyi:2.5.4 | October 21, 2026 |
| pypi | pyyi:2.5.5 | October 21, 2026 |
One Package, Six New Versions: 10 Malicious Package Versions This Week
Fewer versions than last week, but the same patterns. PyPI came back with six new versions, five of them in 22 minutes, so blocking a single version doesn’t stop the package. The Baileys name and inflated version numbers also returned. Of the 10 versions, Xygeni confirmed 9.
Xygeni Malware Early Warning monitors npm, PyPI, Maven, Composer, OpenVSX, and other registries in real time, flagging threats at publication, before they reach a build. Xygeni’s Open Source Security platform adds the prioritization DevSecOps teams need to act on the ones that matter first.
