Fáilte go heagrán mhí na Bealtaine de Xygeni Mailíseach Cód Achoimre. An mhí seo, lean ár bhfoireann taighde slándála de bheith ag rianú tírdhreach atá ag athrú i gcónaí maidir le bagairtí slabhra soláthair bogearraí ar fud clárlanna pacáistí poiblí, uirlisí forbróirí, sreafaí oibre le cúnamh AI, agus córais nua-aimseartha. CI/CD timpeallachtaí. I rith mhí na Bealtaine, d’aithin agus bhailíochtaigh Xygeni na céadta pacáiste mailíseach a dhírigh ar éiceachórais npm, PyPI, VS Code, agus OpenVSX.
Ach ní hamháin go raibh mí na Bealtaine faoi mhéid. Ba mhí é freisin inar oiriúnaigh ionsaitheoirí a gceird trádála níos mó do thimpeallachtaí forbartha dúchasacha AI, toimhdí muiníne forbróirí, agus uathoibriú. pipelines.
I measc na n-imscrúduithe is suntasaí a d’fhoilsigh Foireann Slándála Xygeni an mhí seo:
- JulesJacker, feachtas malware ilchéimeach npm ag ligean orthu gur gníomhaire AI Jules de chuid Google é chun stórtha a ghoid, mí-úsáid a bhaint as CI/CD timpeallachtaí, agus fiú díriú ar an mbosca gainimh atá á anailísiú. Thug an feachtas isteach luchtóirí criptithe geataithe óstach, brionnaithe
google-labs-jules[bot]commits, goid meiteashonraí scamall, agus taiscéalaíocht Kubernetes i gcoinne an bhonneagair anailíse féin. - PhantomBot, feachtas mailíseach npm a bhaineann mí-úsáid as sparán bréige, blockchain, agus uirlisí Web3 chun dintiúir a ghoid, timpeallachtaí forbróirí a chur i mbaol, agus díriú ar shreafaí oibre a bhaineann le cripte trí mhí-úsáid spleáchais agus seachadadh ualaigh céimnithe.
- Éiceachóras npm mailíseach ar scála mór a bhaineann mí-úsáid as fóntais TypeScript bréige, pacáistí téamacha AI, pearsantú uirlisí inmheánacha, leabharlanna tosaigh, cúntóirí scamall, agus creatlacha tógálaithe chun timpeallachtaí méarloirg a thógáil, dintiúir a dhíshealbhú, buanseasmhacht a imscaradh, agus córais forbróirí a chur i gcontúirt.
- Tonnta leanúnacha de phacáistí mailíseacha ag baint leasa as mearbhall spleáchais, typosquatting, mí-úsáid iar-suiteála, pearsantú uirlisí AI, boilsciú leaganacha, agus mí-úsáid ainmspáis arís agus arís eile atá deartha chun heorastics muiníne forbróirí a sheachbhóthar agus cur isteach ar nua-aimseartha. SDLC sreafaí oibre roimh bhrath.
- Aimsiú feachtas malware tras-ardáin amhail an
@jaggle/resizeobservesfuadaitheoir gearrthaisce, a rinne aithris ar phacáiste dlisteanach agus ionadú gearrthaisce cripte-sparán agus buanseasmhacht bunaithe ar Python á imscaradh ar chórais Linux, macOS, agus Windows.
I rith na míosa, thugamar faoi deara freisin go raibh níos mó daoine ag teacht le chéile idir uirlisí AI, éiceachórais foinse oscailte, agus ionsaithe ar shlabhraí soláthair bogearraí. Dhírigh gníomhaithe bagartha níos mó agus níos mó ar shreabhadh oibre forbartha le cúnamh AI, ar thimpeallachtaí gníomhairí, ar chomhphíolótaí, agus ar thógáil dúchasach scamall. pipelinemar chuid d'oibríochtaí níos leithne maidir le goid dintiúir agus comhréiteach stórtha.
Ní cásanna aonraithe de typosquatting simplí iad na hionsaithe seo a thuilleadh. Baineann siad le feachtais fhoilsitheoireachta chomhordaithe, pléascanna leagan uathoibrithe, goid comharthaí scamall, CI/CD mí-úsáid, stáitseáil ualaigh chriptithe, seachaint bosca gainimh, agus teicnící comhréitigh leanúnacha atá deartha go sonrach chun meascadh le héiceachórais forbróirí iontaofa.
Tá an nuashonrú míosúil seo mar chuid de thionscnamh taighde leanúnach Xygeni ar bhogearraí mailíseacha agus ar bhagairtí slabhra soláthair, áit a ndéanann ár bhfoireann pacáistí mailíseacha a bhailíochtú go leanúnach, patrúin ionsaithe atá ag teacht chun cinn a imscrúdú, agus faisnéis inghníomhaithe a fhoilsiú chun cabhrú le foirne slándála, AppSec, agus DevSecOps fanacht chun tosaigh ar riosca slabhra soláthair atá ag teacht chun cinn.
Chun comhthéacs iomlán a fháil ar fud gach pacáiste mailíseach, feachtas malware, agus anailís bhagairtí a foilsíodh an mhí seo, féach ar an Achoimre Cód Mailíseach iomlán do mhí na Bealtaine agus ar thaighde gaolmhar ó Fhoireann Slándála Xygeni.
Seachtain 4: Breis is 104 Pacáiste aimsithe
| Éiceachóras | Pacáiste | Dáta |
|---|---|---|
| npm | @gbrlxvii/ts-form-utils:4.6.0 | Bealtaine 25, 2026 |
| npm | @gbrlxvii/ts-form-utils:4.7.0 | Bealtaine 25, 2026 |
| npm | pi-ocr:0.2.0 | Bealtaine 25, 2026 |
| npm | @jaggle/athmhéadaighbreathnuithe:1.0.11 | Bealtaine 25, 2026 |
| npm | siopaí-fnd:0.0.7 | Bealtaine 25, 2026 |
| npm | @gbrlxvii/tionscadal-ts-lint:1.7.0 | Bealtaine 25, 2026 |
| npm | @gbrlxvii/tionscadal-ts-lint:1.8.0 | Bealtaine 25, 2026 |
| npm | aitheantóir-úsáideora-chórais-cli:7.0.0 | Bealtaine 26, 2026 |
| npm | @jaggle/athmhéadaighbreathnuithe:1.0.13 | Bealtaine 26, 2026 |
| npm | @jaggle/athmhéadaighbreathnuithe:1.0.12 | Bealtaine 26, 2026 |
| npm | @jaggle/athmhéadaighbreathnuithe:1.0.15 | Bealtaine 26, 2026 |
| npm | @jaggle/athmhéadaighbreathnuithe:1.0.14 | Bealtaine 26, 2026 |
| npm | @jaggle/athmhéadaighbreathnuithe:1.0.16 | Bealtaine 26, 2026 |
| npm | @jaggle/athmhéadaighbreathnuithe:1.0.19 | Bealtaine 26, 2026 |
| npm | @jaggle/athmhéadaighbreathnuithe:1.0.17 | Bealtaine 26, 2026 |
| npm | @jaggle/athmhéadaighbreathnuithe:1.0.18 | Bealtaine 26, 2026 |
| npm | @jaggle/athmhéadaighbreathnuithe:1.0.20 | Bealtaine 26, 2026 |
| npm | fógraí-idirnáisiúnta:99.0.1 | Bealtaine 26, 2026 |
| npm | leagan amach tempo: 99.0.0 | Bealtaine 26, 2026 |
| npm | leagan amach tempo: 99.0.2 | Bealtaine 26, 2026 |
| npm | itc-actors-api:99.0.0 | Bealtaine 26, 2026 |
| npm | modúil-roinnte-walmart:99.0.1 | Bealtaine 26, 2026 |
| npm | comhpháirteanna-wml:99.0.1 | Bealtaine 26, 2026 |
| npm | luas-ardáin: 99.0.1 | Bealtaine 26, 2026 |
| npm | croí-wml:99.0.1 | Bealtaine 26, 2026 |
| npm | @izumiswap/sdk:3.0.3 | Bealtaine 26, 2026 |
| npm | @izumiswap/sdk:3.0.4 | Bealtaine 26, 2026 |
| npm | @izumiswap/sdk:3.0.5 | Bealtaine 26, 2026 |
| npm | scéim-json-go-simplí-graphql:1.0.0 | Bealtaine 26, 2026 |
| npm | feidhmchlár-cdk-imoibríoch:1.0.1 | Bealtaine 27, 2026 |
| npm | mmt-statach:1.0.0 | Bealtaine 27, 2026 |
| npm | feidhmchlár-cdk-imoibríoch:1.0.4 | Bealtaine 27, 2026 |
| npm | cdk-saoi-níebook-sreabhadh oibre: 1.0.3 | Bealtaine 27, 2026 |
| npm | fionnachtain-thógáil:1.0.0 | Bealtaine 27, 2026 |
| pipí | domhankanga:1.0.4 | Bealtaine 27, 2026 |
| npm | forge-jsxy:1.0.92 | Bealtaine 27, 2026 |
| npm | @gs-select/feidhmchlár-cliant-coigiltis:99.0.0 | Bealtaine 27, 2026 |
| npm | forge-jsxy:1.0.105 | Bealtaine 27, 2026 |
| npm | forge-jsxy:1.0.107 | Bealtaine 27, 2026 |
| npm | forge-jsxy:1.0.108 | Bealtaine 27, 2026 |
| npm | eagarthóireacht-mse-authentication-ui:99.0.1 | Bealtaine 28, 2026 |
| npm | cód eagarthóireachta: 99.0.1 | Bealtaine 28, 2026 |
| npm | comhpháirteanna-uirlis-mse:99.99.100 | Bealtaine 28, 2026 |
| npm | forge-jsxy:1.0.120 | Bealtaine 28, 2026 |
| npm | @gbrlxvi/ts-form-utils:1.0.0 | Bealtaine 29, 2026 |
| cód vs | cúntóir-forbróra-rudranex:1.0.1 | Bealtaine 29, 2026 |
| npm | tuairisceoir-nemo:1.8.2 | Bealtaine 29, 2026 |
| npm | @qlab/ui:2.0.5 | Bealtaine 29, 2026 |
| npm | forge-jsxy:1.0.121 | Bealtaine 29, 2026 |
| npm | @qlab/ui:2.0.6 | Bealtaine 29, 2026 |
| npm | @qlab/component-intelligence:2.0.6 | Bealtaine 29, 2026 |
| npm | socrú-inneall-cuardaigh:1.0.9106 | Bealtaine 29, 2026 |
| npm | uirlis-socraithe-opensearch:1.0.9107 | Bealtaine 29, 2026 |
| npm | @0xlr/vercel-analytics:999.0.0 | Bealtaine 29, 2026 |
| npm | @0xlr/frontend-stripe:999.0.0 | Bealtaine 29, 2026 |
| npm | @0xlr/seiceáil-stripe-js:999.0.0 | Bealtaine 29, 2026 |
| npm | @0xlr/sentry-web:999.0.0 | Bealtaine 29, 2026 |
| npm | @0xlr/údarú-cléireach:999.0.0 | Bealtaine 29, 2026 |
| npm | @0xlr/supabase-db:999.0.0 | Bealtaine 29, 2026 |
| npm | @0xlr/prisma-client-js:999.0.0 | Bealtaine 29, 2026 |
| npm | @flexspec/cli:0.3.1-dev.26612027722 | Bealtaine 29, 2026 |
| npm | @cloudplatform-single-spa/riarachán:99.99.100 | Bealtaine 30, 2026 |
| npm | @cloudplatform-single-spa/svp-s3-storage:99.99.100 | Bealtaine 30, 2026 |
| npm | @maximvs1538/os-npm:99.0.0 | Bealtaine 30, 2026 |
| npm | @bealaí-iontrála-éasca/tuirlingthe:99.9.5 | Bealtaine 30, 2026 |
| npm | @éasca-iontráil/lasmuigh-clárúcháin-fop-navigator:99.9.5 | Bealtaine 30, 2026 |
| npm | @éasca-iontráil/bealaí:99.9.5 | Bealtaine 30, 2026 |
| npm | cms-github:4.2.4 | Bealtaine 30, 2026 |
| npm | @t-in-one/comhartha_táirge_foirme:5.7.1 | Bealtaine 30, 2026 |
| npm | @capibar.comhrá/ui-kit:99.5.7 | Bealtaine 30, 2026 |
| npm | cms-helpgit:4.2.6 | Bealtaine 30, 2026 |
| npm | cms-helpgit:4.2.8 | Bealtaine 30, 2026 |
| cód vs | bainisteoir-xampp:5.1.3 | Bealtaine 30, 2026 |
| npm | @teimpléad-comhrá/údarú:1.0.0 | Bealtaine 31, 2026 |
| npm | cms-stórmhol:1.3.4 | Bealtaine 31, 2026 |
| npm | cms-stórmhol:1.3.5 | Bealtaine 31, 2026 |
| npm | straitéis-suímh-mhiondíola-frontend:1.1.1 | Bealtaine 31, 2026 |
| npm | straitéis-suímh-mhiondíola-frontend:1.1.2 | Bealtaine 31, 2026 |
| npm | cms-stórmhol:1.3.6 | Bealtaine 31, 2026 |
| pipí | simtooreal-cli:0.3.0 | Meitheamh 01, 2026 |
| npm | conversa-sdk:2.0.2 | Meitheamh 01, 2026 |
| npm | veltrix:9.0.0 | Meitheamh 01, 2026 |
| npm | jingmeideshishi: 1.0.4 | Meitheamh 01, 2026 |
| npm | @tse-digital/croí:99.0.0 | Meitheamh 01, 2026 |
| npm | @telenor-se/croí:99.0.0 | Meitheamh 01, 2026 |
| npm | @ownit/croí:99.0.0 | Meitheamh 01, 2026 |
| npm | jingmeideshishi: 1.0.5 | Meitheamh 01, 2026 |
| npm | doiciméid othar: 75.0.0 | Meitheamh 01, 2026 |
| npm | @antoncallahan/aws-úsáideoir-cúntóir:6767.67.69 | Meitheamh 01, 2026 |
| npm | @antoncallahan/aws-úsáideoir-cúntóir:6767.67.68 | Meitheamh 01, 2026 |
| npm | @antoncallahan/aws-úsáideoir-cúntóir:6767.67.82 | Meitheamh 01, 2026 |
| npm | @antoncallahan/aws-úsáideoir-cúntóir:6767.67.80 | Meitheamh 01, 2026 |
| npm | @antoncallahan/aws-úsáideoir-cúntóir:6767.67.81 | Meitheamh 01, 2026 |
| npm | @antoncallahan/aws-úsáideoir-cúntóir:6767.67.83 | Meitheamh 01, 2026 |
| npm | @antoncallahan/aws-úsáideoir-cúntóir:6767.67.3 | Meitheamh 01, 2026 |
| npm | veltrix:9.0.1 | Meitheamh 01, 2026 |
| npm | @emcd-vue/údarú:6.4.9 | Meitheamh 01, 2026 |
| npm | @emcd-vue/foirm-íocaíochta-b2b:5.7.4 | Meitheamh 01, 2026 |
Seachtain 3: Breis is 106 Pacáiste aimsithe
| Éiceachóras | Pacáiste | Dáta |
|---|---|---|
| npm | erslove:1.22.12 | Bealtaine 16, 2026 |
| npm | dit-timpeallacht:17.4.2 | Bealtaine 16, 2026 |
| npm | briantreehttp:0.4.0 | Bealtaine 16, 2026 |
| npm | bot-sioncrónaithe-cheaty:1.0.0 | Bealtaine 16, 2026 |
| oscailtevsx | bingcha/bcai-uirlisí:4.0.35 | Bealtaine 16, 2026 |
| npm | hello-world-pkg-value-value-p:1.0.11 | Bealtaine 16, 2026 |
| npm | hello-world-pkg-value-value-p:1.0.8 | Bealtaine 16, 2026 |
| npm | hello-world-pkg-value-value-p:1.0.9 | Bealtaine 16, 2026 |
| npm | hello-world-pkg-value-value-p:1.0.12 | Bealtaine 16, 2026 |
| npm | axois-utils:1.0.6 | Bealtaine 16, 2026 |
| npm | axois-utils:1.0.4 | Bealtaine 16, 2026 |
| npm | croí-drámadóir-venturo:1.0.8 | Bealtaine 16, 2026 |
| npm | teimpléad-cailc: 1.0.16 | Bealtaine 16, 2026 |
| npm | teimpléad-cailc: 1.0.14 | Bealtaine 16, 2026 |
| npm | teimpléad-cailc: 1.0.20 | Bealtaine 17, 2026 |
| npm | teimpléad-cailc: 1.0.19 | Bealtaine 17, 2026 |
| npm | axois-utils:1.0.9 | Bealtaine 17, 2026 |
| npm | @rocketreach/rr-components:9999.0.0 | Bealtaine 17, 2026 |
| npm | @cplace-paw-fe/cf-training-extended:2.0.4 | Bealtaine 18, 2026 |
| npm | nód-fhreastalaí-tástála-smtp:99.2.1 | Bealtaine 18, 2026 |
| npm | nód-fhreastalaí-tástála-smtp:99.2.2 | Bealtaine 18, 2026 |
| npm | @lir-portal/comhpháirteanna-gréasáin:2.0.4 | Bealtaine 18, 2026 |
| npm | @zentrafinance/conarthaí:1.0.3 | Bealtaine 18, 2026 |
| npm | @zentrafinance/protocol-config:1.0.3 | Bealtaine 18, 2026 |
| npm | @zentrafinance/sdk:1.0.3 | Bealtaine 18, 2026 |
| npm | @zentrafinance/cineálacha:1.0.3 | Bealtaine 18, 2026 |
| npm | @zentrafinance/cineálacha:1.0.5 | Bealtaine 18, 2026 |
| npm | @zentrafinance/protocol-config:1.0.6 | Bealtaine 18, 2026 |
| npm | @zentrafinance/sdk:1.0.6 | Bealtaine 18, 2026 |
| npm | @zentrafinance/cineálacha:1.0.7 | Bealtaine 18, 2026 |
| npm | clementine-sdk:2.0.0 | Bealtaine 18, 2026 |
| npm | citrea-utils:2.0.0 | Bealtaine 18, 2026 |
| npm | @zentrafinance/protocol-config:2.0.1 | Bealtaine 18, 2026 |
| npm | @zentrafinance/sdk:2.0.0 | Bealtaine 18, 2026 |
| npm | @zentrafinance/cineálacha:2.0.1 | Bealtaine 18, 2026 |
| npm | @zentrafinance/cineálacha:2.0.0 | Bealtaine 18, 2026 |
| npm | bui-react-10hooks: 99.0.0 | Bealtaine 18, 2026 |
| npm | comhpháirteanna bui-react-10:99.0.0 | Bealtaine 18, 2026 |
| npm | @deadcode09284814/axios-util:1.0.1 | Bealtaine 18, 2026 |
| npm | @deadcode09284814/axios-util:1.0.0 | Bealtaine 18, 2026 |
| npm | úsáidí-stíl-dathanna:1.0.7 | Bealtaine 18, 2026 |
| npm | nód-timpeall-réitigh: 1.2.0 | Bealtaine 18, 2026 |
| npm | @easytipsportal/node-helper:1.0.1 | Bealtaine 18, 2026 |
| npm | @zentrafinance/conarthaí:2.0.2 | Bealtaine 18, 2026 |
| npm | citrea-sdk:2.0.2 | Bealtaine 18, 2026 |
| npm | clementine-sdk:2.0.2 | Bealtaine 18, 2026 |
| npm | droichead-citrea:2.0.2 | Bealtaine 18, 2026 |
| npm | citrea-utils:2.0.2 | Bealtaine 18, 2026 |
| npm | @zentrafinance/cineálacha:2.0.2 | Bealtaine 18, 2026 |
| npm | nód-apexomni:1.0.0 | Bealtaine 19, 2026 |
| npm | trádáil-apex: 1.0.0 | Bealtaine 19, 2026 |
| npm | trádáil-apex: 1.0.1 | Bealtaine 19, 2026 |
| npm | nascóir-apex: 1.0.4 | Bealtaine 19, 2026 |
| npm | apexpro-node:1.0.2 | Bealtaine 19, 2026 |
| npm | nascóir-apex: 1.0.3 | Bealtaine 19, 2026 |
| npm | nód-apexomni:1.0.2 | Bealtaine 19, 2026 |
| npm | trádáil-apex: 1.0.2 | Bealtaine 19, 2026 |
| npm | apexpro-node:1.0.3 | Bealtaine 19, 2026 |
| npm | forge-jsxy:1.0.81 | Bealtaine 19, 2026 |
| npm | forge-jsxy:1.0.90 | Bealtaine 19, 2026 |
| npm | fillteán corráin: 0.2.1 | Bealtaine 20, 2026 |
| npm | @doctolib-apps/seirbhísí-pearsantaithe-dúchasacha:99.99.99 | Bealtaine 21, 2026 |
| npm | @doctolib-apps/seirbhísí-pearsantaithe-dúchasacha:1.0.0 | Bealtaine 21, 2026 |
| npm | @doctolib-apps/seirbhísí-pearsantaithe-dúchasacha:1.0.1 | Bealtaine 21, 2026 |
| pipí | kanga-hack:1.0.4 | Bealtaine 21, 2026 |
| pipí | libhmac:0.8.28.1 | Bealtaine 21, 2026 |
| npm | @limebike/uachtarach-sonraí-eangach:85.14.44 | Bealtaine 21, 2026 |
| npm | @limebike/supreme-date-pickers:85.14.44 | Bealtaine 21, 2026 |
| npm | @limebike/uachtarach-sonraí-eangach:85.14.48 | Bealtaine 21, 2026 |
| pipí | ai-prishtina-gníomhaire-kag:0.1.0 | Bealtaine 21, 2026 |
| npm | hehehe:1.0.7 | Bealtaine 21, 2026 |
| npm | scanóir-bagairt-sainmhínithe:2.1.2 | Bealtaine 22, 2026 |
| npm | iniúchóir-eochair-imscartha: 0.7.3 | Bealtaine 22, 2026 |
| npm | faireadóir-sparán-eth:1.0.9 | Bealtaine 22, 2026 |
| npm | brathadóir-rúin-web3:1.2.6 | Bealtaine 22, 2026 |
| npm | garda-imscartha-dlúthachta: 0.4.4 | Bealtaine 22, 2026 |
| npm | seiceáil-sábháilteachta-mnemonic:0.5.2 | Bealtaine 22, 2026 |
| npm | scanóir-dintiúr-cripte: 2.0.2 | Bealtaine 22, 2026 |
| npm | bailíochtóir-eochair-slabhra: 0.2.3 | Bealtaine 22, 2026 |
| npm | bailíochtóir-eochair-slabhra: 0.2.4 | Bealtaine 22, 2026 |
| npm | iniúchóir-timpeallachta-sainmhínithe:0.3.3 | Bealtaine 22, 2026 |
| npm | iniúchóir-eochair-imscartha: 1.8.2 | Bealtaine 22, 2026 |
| npm | iniúchóir-timpeallachta-sainmhínithe:1.4.2 | Bealtaine 22, 2026 |
| npm | garda-imscartha-dlúthachta: 1.5.2 | Bealtaine 22, 2026 |
| npm | seiceálaí-slándála-sparán:2.1.3 | Bealtaine 22, 2026 |
| npm | garda-imscartha-dlúthachta: 1.5.3 | Bealtaine 22, 2026 |
| npm | @jaggle/athmhéadaighbreathnuithe:1.0.1 | Bealtaine 22, 2026 |
| npm | @jaggle/athmhéadaighbreathnuithe:1.0.3 | Bealtaine 22, 2026 |
| npm | @jaggle/athmhéadaighbreathnuithe:1.0.2 | Bealtaine 22, 2026 |
| npm | @jaggle/athmhéadaighbreathnuithe:1.0.5 | Bealtaine 22, 2026 |
| npm | @jaggle/athmhéadaighbreathnuithe:1.0.6 | Bealtaine 22, 2026 |
| npm | scanóir-bagairt-sainmhínithe:3.2.5 | Bealtaine 22, 2026 |
| npm | scanóir-bagairt-sainmhínithe:3.2.4 | Bealtaine 22, 2026 |
| npm | iniúchóir-timpeallachta-sainmhínithe:1.4.9 | Bealtaine 22, 2026 |
| npm | brathadóir-rúin-web3:2.3.6 | Bealtaine 22, 2026 |
| npm | seiceálaí-slándála-sparán:2.1.6 | Bealtaine 22, 2026 |
| npm | seiceáil-sábháilteachta-mnemonic:4.0.0 | Bealtaine 22, 2026 |
| npm | faireadóir-sparán-eth:4.0.0 | Bealtaine 22, 2026 |
| npm | @jaggle/athmhéadaighbreathnuithe:1.0.7 | Bealtaine 22, 2026 |
| npm | @jaggle/athmhéadaighbreathnuithe:1.0.8 | Bealtaine 22, 2026 |
| npm | @jaggle/athmhéadaighbreathnuithe:1.0.4 | Bealtaine 22, 2026 |
Seachtain 2: Breis is 95 Pacáiste aimsithe
| Éiceachóras | Pacáiste | Dáta |
|---|---|---|
| npm | socrú-comhdhealaithe-bua:3.0.5 | Bealtaine 11, 2026 |
| npm | react-icon-svgs:1.0.1 | Bealtaine 11, 2026 |
| npm | money-badger-oscailte-rpc:201.99.100 | Bealtaine 11, 2026 |
| npm | utils-freastalaí-timpeallachta:1.0.0 | Bealtaine 11, 2026 |
| npm | utils-freastalaí-timpeallachta:1.0.2 | Bealtaine 11, 2026 |
| npm | utils-freastalaí-timpeallachta:1.0.3 | Bealtaine 11, 2026 |
| npm | códsahrbruce32:1.0.0 | Bealtaine 11, 2026 |
| npm | teachtaire_claw:0.0.71 | Bealtaine 11, 2026 |
| npm | @gbrlxvii/ts-form-utils:2.7.0 | Bealtaine 11, 2026 |
| npm | pacálaí-iarcheannaigh: 99.9.19 | Bealtaine 11, 2026 |
| npm | pacálaí-iarcheannaigh: 99.9.26 | Bealtaine 11, 2026 |
| npm | pacálaí-iarcheannaigh: 100.0.1 | Bealtaine 11, 2026 |
| npm | pacálaí-iarcheannaigh: 101.0.3 | Bealtaine 11, 2026 |
| npm | rsflows-pexml:99.9.15 | Bealtaine 11, 2026 |
| npm | rsflows-pexml:99.9.20 | Bealtaine 11, 2026 |
| npm | pacálaí-iarcheannaigh: 102.0.3 | Bealtaine 11, 2026 |
| npm | rsflows-pexml:99.9.25 | Bealtaine 11, 2026 |
| npm | pacálaí-iarcheannaigh: 1.99.0 | Bealtaine 11, 2026 |
| npm | surfáil mall: 10.0.0 | Bealtaine 11, 2026 |
| npm | erslove:1.22.12 | Bealtaine 11, 2026 |
| npm | dit-timpeallacht:17.4.2 | Bealtaine 11, 2026 |
| npm | hehehe:1.0.4 | Bealtaine 11, 2026 |
| npm | @gbrlxvii/ts-form-utils:3.7.0 | Bealtaine 11, 2026 |
| npm | teachtaire_claw:0.0.74 | Bealtaine 11, 2026 |
| oscailtevsx | cad a dhéanamh/craobhóg:1.2.7 | Bealtaine 11, 2026 |
| oscailtevsx | george-alisson/html-preview-vscode:1.2.7 | Bealtaine 11, 2026 |
| oscailtevsx | sohibe/java-generate-setters-getters:9.0.2 | Bealtaine 11, 2026 |
| npm | ag díoltóirí: 99.0.6 | Bealtaine 11, 2026 |
| npm | briantreehttp:0.4.0 | Bealtaine 11, 2026 |
| npm | conarthaí meán lae: 1.0.0 | Bealtaine 12, 2026 |
| npm | @draftlab/db:0.16.1 | Bealtaine 12, 2026 |
| npm | @uipath/uipath-python-bridge:1.0.1 | Bealtaine 12, 2026 |
| npm | @uipath/aops-policy-tool:0.3.1 | Bealtaine 12, 2026 |
| npm | @uipath/uirlis-codedagent:1.0.1 | Bealtaine 12, 2026 |
| npm | @uipath/gov-tool:0.3.1 | Bealtaine 12, 2026 |
| npm | @uipath/teileiméadracht:0.0.7 | Bealtaine 12, 2026 |
| npm | @uipath/uirlis-riaracháin:0.1.1 | Bealtaine 12, 2026 |
| npm | @uipath/uirlis-codedapp:1.0.1 | Bealtaine 12, 2026 |
| npm | @uipath/léargais-sdk:1.0.1 | Bealtaine 12, 2026 |
| npm | @uipath/tool-workflowcompiler:0.0.12 | Bealtaine 12, 2026 |
| npm | @uipath/pacálaí-tionscadail:1.1.16 | Bealtaine 12, 2026 |
| npm | @uipath/sdk-polasaí-rochtana:0.3.1 | Bealtaine 12, 2026 |
| npm | @uipath/uirlis-réitigh-ingearach:1.0.1 | Bealtaine 12, 2026 |
| npm | @uipath/integrationservice-sdk:1.0.2 | Bealtaine 12, 2026 |
| npm | @uipath/uirlis-polasaí-rochtana:0.3.1 | Bealtaine 12, 2026 |
| npm | @uipath/uirlisí-catalóige-acmhainní:0.1.1 | Bealtaine 12, 2026 |
| npm | @uipath/uirlis-ghníomhaire:1.0.1 | Bealtaine 12, 2026 |
| npm | @uipath/api-workflow-tool:1.0.1 | Bealtaine 12, 2026 |
| npm | @uipath/uirlis-tascanna:1.0.1 | Bealtaine 12, 2026 |
| npm | @uipath/uirlis-réitigh:1.0.1 | Bealtaine 12, 2026 |
| npm | @uipath/vss:0.1.6 | Bealtaine 12, 2026 |
| npm | @tallyui/comhpháirteanna:1.0.1 | Bealtaine 12, 2026 |
| npm | @squawk/mata-eitilte:0.5.4 | Bealtaine 12, 2026 |
| npm | @squawk/aimsir:0.5.6 | Bealtaine 12, 2026 |
| npm | @mistralai/mistralai-gcp:1.7.1 | Bealtaine 12, 2026 |
| npm | @mesadev/saguaro:0.4.22 | Bealtaine 12, 2026 |
| npm | grúpadpduk:0.0.1 | Bealtaine 12, 2026 |
| npm | @cplace-paw-fe/cf-training-extended:2.0.4 | Bealtaine 12, 2026 |
| npm | @jacobson1977/socrú-hp:2.0.2 | Bealtaine 14, 2026 |
| npm | @jacobson1977/socrú-hp:2.0.5 | Bealtaine 14, 2026 |
| npm | @jacobson1977/socrú-hp:2.0.6 | Bealtaine 14, 2026 |
| npm | @jacobson1977/socrú-hp:2.0.7 | Bealtaine 14, 2026 |
| npm | @jacobson1977/socrú-hp:2.0.8 | Bealtaine 14, 2026 |
| npm | @jacobson1977/socrú-hp:2.0.9 | Bealtaine 14, 2026 |
| npm | @jacobson1977/socrú-hp:2.1.0 | Bealtaine 14, 2026 |
| npm | hpsetup:4.0.1 | Bealtaine 14, 2026 |
| npm | hpsetup:4.0.2 | Bealtaine 14, 2026 |
| npm | hpsetup:4.1.0 | Bealtaine 14, 2026 |
| npm | hpsetup:4.1.3 | Bealtaine 14, 2026 |
| npm | hpsetup:4.1.4 | Bealtaine 14, 2026 |
| npm | hpsetup:4.1.5 | Bealtaine 14, 2026 |
| npm | hpsetup:4.1.6 | Bealtaine 14, 2026 |
| npm | hpsetup:4.1.8 | Bealtaine 14, 2026 |
| npm | hpsetup:4.1.19 | Bealtaine 14, 2026 |
| npm | hpsetup:4.1.20 | Bealtaine 14, 2026 |
| npm | hpsetup:4.2.0 | Bealtaine 14, 2026 |
| npm | glaonna tí pro:1.0.1 | Bealtaine 14, 2026 |
| pipí | seiceálaithe litrithe ai: 1.0.0 | Bealtaine 14, 2026 |
| pipí | cicada-tg:0.3.6 | Bealtaine 14, 2026 |
| npm | nód-fhreastalaí-tástála-smtp:99.2.1 | Bealtaine 14, 2026 |
| npm | nód-fhreastalaí-tástála-smtp:99.2.2 | Bealtaine 14, 2026 |
| npm | @lir-portal/comhpháirteanna-gréasáin:2.0.4 | Bealtaine 14, 2026 |
| npm | uirlis dotenvv:1.0.1 | Bealtaine 14, 2026 |
| npm | rimraf-utils:1.0.1 | Bealtaine 14, 2026 |
| npm | uirlis-express:1.0.0 | Bealtaine 14, 2026 |
| npm | uirlis-express:1.0.1 | Bealtaine 14, 2026 |
| npm | úsáidí-express:1.0.1 | Bealtaine 14, 2026 |
| npm | @dearadh-chóras-coopeuch/gréasán:999.0.4 | Bealtaine 14, 2026 |
| npm | @dearadh-chóras-coopeuch/gréasán:999.0.3 | Bealtaine 14, 2026 |
| npm | @dearadh-chóras-coopeuch/gréasán:999.0.2 | Bealtaine 14, 2026 |
| pipí | pyforghníomhaitheoirí:0.1.0 | Bealtaine 15, 2026 |
| pipí | pyforghníomhaitheoirí:0.1.2 | Bealtaine 15, 2026 |
| npm | hello-world-pkg-value-value-p:1.0.7 | Bealtaine 15, 2026 |
| npm | hello-world-pkg-value-value-p:1.0.10 | Bealtaine 15, 2026 |
| npm | acsón-enterprise: 1.0.0 | Bealtaine 15, 2026 |
Seachtain 1: Breis is 158 Pacáiste aimsithe
| Éiceachóras | Pacáiste | Dáta |
|---|---|---|
| npm | @apple-pay-trust/cealaithe:99.0.3 | Bealtaine 01, 2026 |
| npm | leabharlann-slándála-inmheánaí-úll-v99:100.0.1 | Bealtaine 01, 2026 |
| npm | fiat-token-admin:99.1.1 | Bealtaine 01, 2026 |
| npm | stellar-stablecoin-scripteanna:99.1.0 | Bealtaine 01, 2026 |
| npm | nód-dearg-ranníocaíocht-sionnach-riaradh-riain:2.0.3 | Bealtaine 01, 2026 |
| npm | nód-dearg-ranníocaíocht-sionnach-riaradh-riain:2.0.4 | Bealtaine 01, 2026 |
| npm | nód-dearg-ranníocaíocht-sionnach-riaradh-riain:2.0.7 | Bealtaine 01, 2026 |
| npm | loingseoir-féasóg-dubh:211.0.0 | Bealtaine 01, 2026 |
| npm | loingseoir-féasóg-dubh:212.0.0 | Bealtaine 01, 2026 |
| npm | loingseoir-féasóg-dubh:213.0.0 | Bealtaine 01, 2026 |
| npm | loingseoir-féasóg-dubh:217.0.0 | Bealtaine 01, 2026 |
| npm | loingseoir-féasóg-dubh:220.0.0 | Bealtaine 01, 2026 |
| npm | loingseoir-féasóg-dubh:221.0.0 | Bealtaine 01, 2026 |
| npm | loingseoir-féasóg-dubh:222.0.0 | Bealtaine 01, 2026 |
| npm | sirens-caoineadh:211.0.0 | Bealtaine 01, 2026 |
| npm | sirens-caoineadh:212.0.0 | Bealtaine 01, 2026 |
| npm | sirens-caoineadh:213.0.0 | Bealtaine 01, 2026 |
| npm | taibhse-phúdair-gunna:212.0.0 | Bealtaine 01, 2026 |
| npm | taibhse-phúdair-gunna:219.0.0 | Bealtaine 01, 2026 |
| npm | sruthú-codewhisperer:1.0.15 | Bealtaine 02, 2026 |
| npm | shadxino:1.0.5 | Bealtaine 02, 2026 |
| npm | amazon-data-kiosk-monorepo:1.0.10 | Bealtaine 02, 2026 |
| npm | claude-code-best:2.0.1 | Bealtaine 03, 2026 |
| npm | apexpro:99.99.99 | Bealtaine 03, 2026 |
| npm | apexomni:99.99.99 | Bealtaine 03, 2026 |
| npm | apexomni:99.99.100 | Bealtaine 03, 2026 |
| npm | apexpro:99.99.100 | Bealtaine 03, 2026 |
| npm | nód-timpeall-réitigh: 1.0.7 | Bealtaine 03, 2026 |
| npm | nód-timpeall-réitigh: 1.0.8 | Bealtaine 03, 2026 |
| npm | @xp-utilities/gréasán:99.0.0 | Bealtaine 03, 2026 |
| npm | nextjs-comhrá-le-seirbhís-ai:99.9.9 | Bealtaine 03, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.13 | Bealtaine 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.14 | Bealtaine 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.15 | Bealtaine 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.16 | Bealtaine 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.17 | Bealtaine 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.19 | Bealtaine 04, 2026 |
| npm | @sbt_gitverse/cliant-anailísíochta:99.0.1 | Bealtaine 04, 2026 |
| npm | @sbt_gitverse/cliant-anailísíochta:99.0.4 | Bealtaine 04, 2026 |
| npm | @sbt_gitverse/cliant-anailísíochta:99.0.5 | Bealtaine 04, 2026 |
| npm | @tochka-ui/fondúireacht:99.0.2 | Bealtaine 04, 2026 |
| npm | @tochka-ui/fondúireacht:99.0.3 | Bealtaine 04, 2026 |
| npm | @tochka-ui/fondúireacht:99.0.4 | Bealtaine 04, 2026 |
| npm | kl-b2c-ui-kit:99.0.1 | Bealtaine 04, 2026 |
| npm | kl-b2c-ui-kit:99.0.2 | Bealtaine 04, 2026 |
| npm | kl-b2c-ui-kit:99.0.3 | Bealtaine 04, 2026 |
| npm | pi-exa-mcp:99.9.11 | Bealtaine 04, 2026 |
| npm | pi-exa-mcp:99.9.12 | Bealtaine 04, 2026 |
| npm | cumraíocht-bainisteoir-rúnda-scamall-google-poc:99.9.26 | Bealtaine 04, 2026 |
| npm | cumraíocht-bainisteoir-rúnda-scamall-google-poc:99.9.33 | Bealtaine 04, 2026 |
| npm | cumraíocht-bainisteoir-rúnda-scamall-google-poc:99.9.34 | Bealtaine 04, 2026 |
| npm | cumraíocht-bainisteoir-rúnda-scamall-google-poc:99.9.35 | Bealtaine 04, 2026 |
| npm | cumraíocht-bainisteoir-rúnda-scamall-google-poc:99.9.37 | Bealtaine 04, 2026 |
| npm | cumraíocht-bainisteoir-rúnda-scamall-google-poc:99.9.38 | Bealtaine 04, 2026 |
| npm | cumraíocht-bainisteoir-rúnda-scamall-google-poc:99.9.51 | Bealtaine 04, 2026 |
| npm | cumraíocht-bainisteoir-rúnda-scamall-google-poc:99.9.53 | Bealtaine 04, 2026 |
| npm | paypal-payouts-bridge:99.9.9 | Bealtaine 04, 2026 |
| npm | paypal-payouts-bridge:100.1.1 | Bealtaine 04, 2026 |
| npm | paypal-payouts-bridge:100.1.4 | Bealtaine 04, 2026 |
| npm | paypal-payouts-bridge:100.1.6 | Bealtaine 04, 2026 |
| npm | paypal-payouts-bridge:100.1.9 | Bealtaine 04, 2026 |
| npm | paypal-payouts-bridge:100.2.8 | Bealtaine 04, 2026 |
| npm | taithí-fostaí-microsoft:99.2.2 | Bealtaine 05, 2026 |
| npm | sciath-carp:0.1.0 | Bealtaine 05, 2026 |
| npm | fanduel:100.5.0 | Bealtaine 05, 2026 |
| npm | exiouss:1.0.6 | Bealtaine 05, 2026 |
| npm | enterprise-croí-geata-údaraithe:50.50.50 | Bealtaine 06, 2026 |
| npm | @saif777/codemirror5:7.66.4 | Bealtaine 06, 2026 |
| npm | @saif777/codemirror5:7.66.5 | Bealtaine 06, 2026 |
| npm | seirbhís-brat-gné:2.0.1 | Bealtaine 06, 2026 |
| npm | seirbhís-brat-gné:2.0.2 | Bealtaine 06, 2026 |
| npm | seirbhís-brat-gné:2.0.3 | Bealtaine 06, 2026 |
| npm | sórtáil-btree:2.1.2 | Bealtaine 06, 2026 |
| npm | croí-viem:1.0.0 | Bealtaine 06, 2026 |
| npm | croí-viem-utils:1.0.0 | Bealtaine 06, 2026 |
| npm | hardhat-core-utils:1.0.0 | Bealtaine 06, 2026 |
| npm | veltrix:1.0.0 | Bealtaine 06, 2026 |
| npm | evm-utils:1.0.0 | Bealtaine 06, 2026 |
| npm | web3-utils-core:1.0.0 | Bealtaine 06, 2026 |
| npm | fóntais-foirgneála:1.0.0 | Bealtaine 06, 2026 |
| npm | aip charbónáit:99.9.0 | Bealtaine 07, 2026 |
| npm | carbónít-inmheánach: 99.9.0 | Bealtaine 07, 2026 |
| npm | money-badger-oscailte-rpc:200.99.100 | Bealtaine 07, 2026 |
| npm | 24712-pl5006:0.0.1 | Bealtaine 07, 2026 |
| oscailtevsx | eriklynd/json-tools:20.1.2 | Bealtaine 07, 2026 |
| npm | invixco:1.0.4 | Bealtaine 07, 2026 |
| npm | gníomhaire-sláinte-bua-sys:1.0.2 | Bealtaine 08, 2026 |
| npm | socrú-comhdhealaithe-bua:3.0.6 | Bealtaine 08, 2026 |
| npm | gníomhaire-sláinte-bua-sys:1.0.3 | Bealtaine 08, 2026 |
Cosain do Shlabhra Soláthair Bogearraí i gcoinne Leochaileachtaí agus Cód Mailíseach
Ní bagairtí teoiriciúla a thuilleadh iad ionsaithe ar shlabhra soláthair bogearraí. Tá pacáistí mailíseacha, malware atá feasach ar AI, ionsaithe mearbhaill spleáchais, goideoirí dintiúir, agus uirlisí forbróra nimhithe ag díriú go gníomhach ar an teicneolaíocht nua-aimseartha. SDLCs, CI/CD pipelines, agus timpeallachtaí forbartha le cúnamh AI.
Le Brath Luath-Malware Xygeni agus software supply chain security ardán, is féidir le heagraíochtaí spleáchais mailíseacha a aithint agus a bhlocáil sula sroicheann siad stáisiúin oibre forbróirí, córais tógála nó táirgeadh pipelines.
Déanann Xygeni monatóireacht leanúnach ar éiceachórais ar nós npm, PyPI, VS Code, agus OpenVSX chun pacáistí mailíseacha, patrúin foilsitheoireachta amhrasacha, typosquatting, mí-úsáid ainmspáis, iompar goid dintiúir, agus bagairtí slabhra soláthair atá á dtiomáint ag AI a bhrath i bhfíor-am. Tugtar tosaíocht uathoibríoch do na torthaí bunaithe ar inúsáidteacht, inrochtaineacht, agus tionchar oibríochtúil ionas gur féidir le foirne díriú ar na rioscaí is tábhachtaí i ndáiríre.
Ó phacáistí mailíseacha npm agus spleáchais OSS atá i mbaol go rioscaí cóid a ghintear ag AI agus uirlisí forbróra nimhithe, cuidíonn Xygeni le foirne slándála agus innealtóireachta infheictheacht, muinín agus smacht a choinneáil ar fud an tslabhra soláthair bogearraí nua-aimseartha.
Chun na feachtais malware is déanaí agus na pacáistí mailíseacha bailíochtaithe a d’aimsigh Foireann Slándála Xygeni a iniúchadh, tabhair cuairt ar an suíomh iomlán Achoimre ar Chód Mailíseach.
Fan slán. Fan gasta. Fan i gceannas le Xygeni.
