Fàilte gu deasachadh a’ Chèitein de Xygeni Malicious Code Digest. Am mìos seo, lean an sgioba rannsachaidh tèarainteachd againn air adhart a’ cumail sùil air cruth-tìre atharrachail bhagairtean slabhraidh solair bathar-bog thar chlàran pasgan poblach, innealan luchd-leasachaidh, sruthan-obrach le taic AI, agus siostaman ùr-nodha. CI/CD àrainneachdan. Tron Chèitean, chomharraich agus dhearbh Xygeni ceudan de phasganan droch-rùnach a bha ag amas air eag-shiostaman npm, PyPI, VS Code, agus OpenVSX.
Ach cha robh a’ Chèitean dìreach mu dheidhinn meud. B’ e mìos a bh’ ann cuideachd far an robh luchd-ionnsaigh a’ sìor atharrachadh an cuid ciùird gu àrainneachdan leasachaidh dùthchasach do AI, barailean earbsa luchd-leasachaidh, agus fèin-ghluasadach. pipelines.
Am measg nan rannsachaidhean as ainmeile a chaidh fhoillseachadh le Sgioba Tèarainteachd Xygeni air a’ mhìos seo:
- JulesJacker, iomairt malware npm ioma-ìre a’ dèanamh aithris air riochdaire Jules AI aig Google gus stòran-dàta a ghoid, droch dhìol a dhèanamh CI/CD àrainneachdan, agus eadhon targaid a dhèanamh air a’ bhogsa-gainmhich ga sgrùdadh. Thug an iomairt a-steach luchdairean crioptaichte le geataichean aoigheachd, meallta
google-labs-jules[bot]commits, goid meata-dhàta sgòthan, agus sgrùdadh Kubernetes an aghaidh bun-structar anailis fhèin. - Taibhse Bot, iomairt npm droch-rùnach a’ dèanamh ana-cleachdadh air wallet meallta, blockchain, agus innealan Web3 gus teisteanasan a ghoid, àrainneachdan luchd-leasachaidh a mhilleadh, agus sruthan-obrach co-cheangailte ri crypto a thargaideadh tro dhroch-chleachdadh eisimeileachd agus lìbhrigeadh luchd ìreichte.
- Eag-shiostam npm droch-rùnach air sgèile mhòr a’ dèanamh ana-cleachdadh air goireasan TypeScript meallta, pacaidean le cuspair AI, pearsanachadh innealan a-staigh, leabharlannan aghaidh, luchd-cuideachaidh sgòthan, agus frèamaichean togail gus àrainneachdan lorgan-meòir a lorg, teisteanasan a thoirt a-mach, buanseasmhachd a chleachdadh, agus siostaman luchd-leasachaidh a mhilleadh.
- Tonnan leantainneach de phasganan droch-rùnach a’ cleachdadh troimh-chèile eisimeileachd, typosquatting, droch dhìol às dèidh stàlaidh, pearsanachadh innealan AI, atmhorachd dreach, agus droch dhìol ath-aithris air àite-ainmean a chaidh a dhealbhadh gus heuristics earbsa luchd-leasachaidh a sheachnadh agus an latha an-diugh a mhilleadh. SDLC sruthan-obrach mus tèid an lorg.
- Lorg iomairtean malware thar-àrd-ùrlar leithid an
@jaggle/resizeobservesinneal-fuadachaidh clàr-bhùird, a rinn aithris air pasgan dligheach fhad ’s a bha e a’ cleachdadh buanseasmhachd stèidhichte air Python agus ionadachadh clàr-bhùird crypto-wallet air feadh siostaman Linux, macOS, agus Windows.
Tron mhìos, chunnaic sinn cuideachd barrachd is barrachd cho-chruinneachaidh eadar innealan AI, eag-shiostaman stòr fosgailte, agus ionnsaighean slabhraidh solair bathar-bog. Bha cleasaichean bagairt a’ cuimseachadh barrachd is barrachd air sruthan-obrach leasachaidh le taic AI, àrainneachdan riochdairean, co-phìleatan, agus togail dùthchasach don sgòth. pipelinemar phàirt de ghnìomhachd nas fharsainge airson goid teisteanasan agus milleadh stòr-dàta.
Chan eil na h-ionnsaighean seo nan cùisean iomallach de typosquatting sìmplidh tuilleadh. Tha iad a’ toirt a-steach iomairtean foillseachaidh co-òrdanaichte, spreadhaidhean dreach fèin-ghluasadach, goid chomharran sgòthan, CI/CD droch dhìol, ìreachadh luchd crioptaichte, seachnadh bogsa gainmhich, agus dòighean co-rèiteachaidh leantainneach a chaidh a dhealbhadh gu sònraichte gus am measgachadh a-steach do eag-shiostaman luchd-leasachaidh earbsach.
Tha an ùrachadh mìosail seo mar phàirt de iomairt rannsachaidh leantainneach Xygeni air malware agus bagairtean slabhraidh solair, far a bheil an sgioba againn a’ dearbhadh phasganan droch-rùnach gu leantainneach, a’ sgrùdadh phàtranan ionnsaigh a tha a’ tighinn am bàrr, agus a’ foillseachadh fiosrachadh obrachail gus cuideachadh le sgiobaidhean tèarainteachd, AppSec, agus DevSecOps fuireach air thoiseach air cunnart slabhraidh solair a tha ag atharrachadh.
Airson làn cho-theacsa thar gach pasgan droch-rùnach, iomairt droch-rùnach, agus mion-sgrùdadh bagairt a chaidh fhoillseachadh air a’ mhìos seo, thoir sùil air an geàrr-chunntas slàn de Chòd Droch-rùnach sa Chèitean agus rannsachadh co-cheangailte ris bhon Sgioba Tèarainteachd Xygeni.
Seachdain 4: Còrr is 104 Pasgan air an Lorg
| Ceanglaichean taic | pasgan | Ceann-là |
|---|---|---|
| npm | @gbrlxvii/ts-form-utils:4.6.0 | Mhà 25, 2026 |
| npm | @gbrlxvii/ts-form-utils:4.7.0 | Mhà 25, 2026 |
| npm | pi-ocr:0.2.0 | Mhà 25, 2026 |
| npm | @jaggle/ath-mheudachadhamharc:1.0.11 | Mhà 25, 2026 |
| npm | stòran-fnd:0.0.7 | Mhà 25, 2026 |
| npm | @gbrlxvii/ts-project-lint:1.7.0 | Mhà 25, 2026 |
| npm | @gbrlxvii/ts-project-lint:1.8.0 | Mhà 25, 2026 |
| npm | comharra-cleachdaiche-siostam-cli:7.0.0 | Mhà 26, 2026 |
| npm | @jaggle/ath-mheudachadhamharc:1.0.13 | Mhà 26, 2026 |
| npm | @jaggle/ath-mheudachadhamharc:1.0.12 | Mhà 26, 2026 |
| npm | @jaggle/ath-mheudachadhamharc:1.0.15 | Mhà 26, 2026 |
| npm | @jaggle/ath-mheudachadhamharc:1.0.14 | Mhà 26, 2026 |
| npm | @jaggle/ath-mheudachadhamharc:1.0.16 | Mhà 26, 2026 |
| npm | @jaggle/ath-mheudachadhamharc:1.0.19 | Mhà 26, 2026 |
| npm | @jaggle/ath-mheudachadhamharc:1.0.17 | Mhà 26, 2026 |
| npm | @jaggle/ath-mheudachadhamharc:1.0.18 | Mhà 26, 2026 |
| npm | @jaggle/ath-mheudachadhamharc:1.0.20 | Mhà 26, 2026 |
| npm | sanasan-eadar-nàiseanta:99.0.1 | Mhà 26, 2026 |
| npm | cruth-tempo: 99.0.0 | Mhà 26, 2026 |
| npm | cruth-tempo: 99.0.2 | Mhà 26, 2026 |
| npm | itc-actairean-api:99.0.0 | Mhà 26, 2026 |
| npm | modalan-co-roinnte-walmart: 99.0.1 | Mhà 26, 2026 |
| npm | co-phàirtean-wml:99.0.1 | Mhà 26, 2026 |
| npm | luas-àrd-ùrlair: 99.0.1 | Mhà 26, 2026 |
| npm | wml-core:99.0.1 | Mhà 26, 2026 |
| npm | @izumiswap/sdk:3.0.3 | Mhà 26, 2026 |
| npm | @izumiswap/sdk:3.0.4 | Mhà 26, 2026 |
| npm | @izumiswap/sdk:3.0.5 | Mhà 26, 2026 |
| npm | sgeama json-gu-simple-graphql:1.0.0 | Mhà 26, 2026 |
| npm | aplacaid-cdk-reactive:1.0.1 | Mhà 27, 2026 |
| npm | mmt-statach:1.0.0 | Mhà 27, 2026 |
| npm | aplacaid-cdk-reactive:1.0.4 | Mhà 27, 2026 |
| npm | cdk-saoi-chan eilebook-sruth-obrach: 1.0.3 | Mhà 27, 2026 |
| npm | togail-lorg: 1.0.0 | Mhà 27, 2026 |
| pypi | saoghalkanga: 1.0.4 | Mhà 27, 2026 |
| npm | forge-jsxy:1.0.92 | Mhà 27, 2026 |
| npm | @gs-select/savings-client-application:99.0.0 | Mhà 27, 2026 |
| npm | forge-jsxy:1.0.105 | Mhà 27, 2026 |
| npm | forge-jsxy:1.0.107 | Mhà 27, 2026 |
| npm | forge-jsxy:1.0.108 | Mhà 27, 2026 |
| npm | deasachaidh-mse-dearbhaidh-ui:99.0.1 | Mhà 28, 2026 |
| npm | còd-deasachaidh: 99.0.1 | Mhà 28, 2026 |
| npm | pàirtean-mse-tool:99.99.100 | Mhà 28, 2026 |
| npm | forge-jsxy:1.0.120 | Mhà 28, 2026 |
| npm | @gbrlxvi/ts-form-utils:1.0.0 | Mhà 29, 2026 |
| còd vs | neach-cuideachaidh-leasachaidh-rudranex: 1.0.1 | Mhà 29, 2026 |
| npm | neach-aithris nemo: 1.8.2 | Mhà 29, 2026 |
| npm | @qlab/ui:2.0.5 | Mhà 29, 2026 |
| npm | forge-jsxy:1.0.121 | Mhà 29, 2026 |
| npm | @qlab/ui:2.0.6 | Mhà 29, 2026 |
| npm | @qlab/co-phàirt-inntleachd:2.0.6 | Mhà 29, 2026 |
| npm | suidheachadh-einnsean-luirg: 1.0.9106 | Mhà 29, 2026 |
| npm | inneal-stèidheachaidh-opensearch:1.0.9107 | Mhà 29, 2026 |
| npm | @0xlr/anailis-vercel:999.0.0 | Mhà 29, 2026 |
| npm | @0xlr/stripe-frontend:999.0.0 | Mhà 29, 2026 |
| npm | @0xlr/stiall-pàighidh-js:999.0.0 | Mhà 29, 2026 |
| npm | @0xlr/lìn-faire:999.0.0 | Mhà 29, 2026 |
| npm | @0xlr/ùghdarras-clèireach:999.0.0 | Mhà 29, 2026 |
| npm | @0xlr/supabase-db:999.0.0 | Mhà 29, 2026 |
| npm | @0xlr/prisma-client-js:999.0.0 | Mhà 29, 2026 |
| npm | @flexspec/cli:0.3.1-dev.26612027722 | Mhà 29, 2026 |
| npm | @cloudplatform-single-spa/rianachd:99.99.100 | Mhà 30, 2026 |
| npm | @cloudplatform-single-spa/svp-s3-storage:99.99.100 | Mhà 30, 2026 |
| npm | @maximvs1538/os-npm:99.0.0 | Mhà 30, 2026 |
| npm | @slighean-inntrigidh-furasta/slighean-tìr-air-tìr:99.9.5 | Mhà 30, 2026 |
| npm | @furasta-inntrigeadh/taobh-a-muigh-clàradh-fop-navigator:99.9.5 | Mhà 30, 2026 |
| npm | @furasta-inntrigeadh/slighean:99.9.5 | Mhà 30, 2026 |
| npm | cms-github:4.2.4 | Mhà 30, 2026 |
| npm | @t-ann-aon/comharra_toraidh_foirm:5.7.1 | Mhà 30, 2026 |
| npm | @capibar.chat/ui-kit:99.5.7 | Mhà 30, 2026 |
| npm | cms-helpgit:4.2.6 | Mhà 30, 2026 |
| npm | cms-helpgit:4.2.8 | Mhà 30, 2026 |
| còd vs | manaidsear-xampp:5.1.3 | Mhà 30, 2026 |
| npm | @teamplaid-còmhraidh/ùghdarras:1.0.0 | Mhà 31, 2026 |
| npm | cms-stòr-ionad: 1.3.4 | Mhà 31, 2026 |
| npm | cms-stòr-ionad: 1.3.5 | Mhà 31, 2026 |
| npm | aghaidh-ro-innleachd-àite-reic: 1.1.1 | Mhà 31, 2026 |
| npm | aghaidh-ro-innleachd-àite-reic: 1.1.2 | Mhà 31, 2026 |
| npm | cms-stòr-ionad: 1.3.6 | Mhà 31, 2026 |
| pypi | simtooreal-cli:0.3.0 | OgM 01, 2026 |
| npm | conversa-sdk:2.0.2 | OgM 01, 2026 |
| npm | veltrix:9.0.0 | OgM 01, 2026 |
| npm | jingmeideshishi: 1.0.4 | OgM 01, 2026 |
| npm | @tse-digital/core:99.0.0 | OgM 01, 2026 |
| npm | @telenor-se/cro:99.0.0 | OgM 01, 2026 |
| npm | @ownit/core:99.0.0 | OgM 01, 2026 |
| npm | jingmeideshishi: 1.0.5 | OgM 01, 2026 |
| npm | sgrìobhainnean euslaintich: 75.0.0 | OgM 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.69 | OgM 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.68 | OgM 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.82 | OgM 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.80 | OgM 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.81 | OgM 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.83 | OgM 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.3 | OgM 01, 2026 |
| npm | veltrix:9.0.1 | OgM 01, 2026 |
| npm | @emcd-vue/ùghdarras:6.4.9 | OgM 01, 2026 |
| npm | @emcd-vue/b2b-pàighidh-foirm:5.7.4 | OgM 01, 2026 |
Seachdain 3: Còrr is 106 Pasgan air an Lorg
| Ceanglaichean taic | pasgan | Ceann-là |
|---|---|---|
| npm | gaol-ears:1.22.12 | Mhà 16, 2026 |
| npm | dit-cèilidh:17.4.2 | Mhà 16, 2026 |
| npm | briantreehttp:0.4.0 | Mhà 16, 2026 |
| npm | bot-sioncronachaidh-meallta:1.0.0 | Mhà 16, 2026 |
| fosgailtevsx | bingcha/bcai-innealan: 4.0.35 | Mhà 16, 2026 |
| npm | hello-world-pkg-value-value-p:1.0.11 | Mhà 16, 2026 |
| npm | hello-world-pkg-value-value-p:1.0.8 | Mhà 16, 2026 |
| npm | hello-world-pkg-value-value-p:1.0.9 | Mhà 16, 2026 |
| npm | hello-world-pkg-value-value-p:1.0.12 | Mhà 16, 2026 |
| npm | axois-utils:1.0.6 | Mhà 16, 2026 |
| npm | axois-utils:1.0.4 | Mhà 16, 2026 |
| npm | cridhe-dràma-venturo:1.0.8 | Mhà 16, 2026 |
| npm | teamplaidean-cailc: 1.0.16 | Mhà 16, 2026 |
| npm | teamplaidean-cailc: 1.0.14 | Mhà 16, 2026 |
| npm | teamplaidean-cailc: 1.0.20 | Mhà 17, 2026 |
| npm | teamplaidean-cailc: 1.0.19 | Mhà 17, 2026 |
| npm | axois-utils:1.0.9 | Mhà 17, 2026 |
| npm | @rocketreach/rr-components:9999.0.0 | Mhà 17, 2026 |
| npm | @cplace-paw-fe/cf-training-extended:2.0.4 | Mhà 18, 2026 |
| npm | nód-frithealaiche-deuchainn-smtp:99.2.1 | Mhà 18, 2026 |
| npm | nód-frithealaiche-deuchainn-smtp:99.2.2 | Mhà 18, 2026 |
| npm | @lir-portal/co-phàirtean-lìn:2.0.4 | Mhà 18, 2026 |
| npm | @zentrafinance/cùmhnantan:1.0.3 | Mhà 18, 2026 |
| npm | @zentrafinance/protocol-config:1.0.3 | Mhà 18, 2026 |
| npm | @zentrafinance/sdk:1.0.3 | Mhà 18, 2026 |
| npm | @zentrafinance/seòrsaichean:1.0.3 | Mhà 18, 2026 |
| npm | @zentrafinance/seòrsaichean:1.0.5 | Mhà 18, 2026 |
| npm | @zentrafinance/protocol-config:1.0.6 | Mhà 18, 2026 |
| npm | @zentrafinance/sdk:1.0.6 | Mhà 18, 2026 |
| npm | @zentrafinance/seòrsaichean:1.0.7 | Mhà 18, 2026 |
| npm | clementine-sdk:2.0.0 | Mhà 18, 2026 |
| npm | citrea-utils:2.0.0 | Mhà 18, 2026 |
| npm | @zentrafinance/protocol-config:2.0.1 | Mhà 18, 2026 |
| npm | @zentrafinance/sdk:2.0.0 | Mhà 18, 2026 |
| npm | @zentrafinance/seòrsaichean:2.0.1 | Mhà 18, 2026 |
| npm | @zentrafinance/seòrsaichean:2.0.0 | Mhà 18, 2026 |
| npm | bui-react-10hooks: 99.0.0 | Mhà 18, 2026 |
| npm | bui-react-10components:99.0.0 | Mhà 18, 2026 |
| npm | @deadcode09284814/axios-util:1.0.1 | Mhà 18, 2026 |
| npm | @deadcode09284814/axios-util:1.0.0 | Mhà 18, 2026 |
| npm | goireasan-stoidhle-dath: 1.0.7 | Mhà 18, 2026 |
| npm | fuasgladh-cèilidh-node:1.2.0 | Mhà 18, 2026 |
| npm | @easytipsportal/node-helper:1.0.1 | Mhà 18, 2026 |
| npm | @zentrafinance/cùmhnantan:2.0.2 | Mhà 18, 2026 |
| npm | citrea-sdk:2.0.2 | Mhà 18, 2026 |
| npm | clementine-sdk:2.0.2 | Mhà 18, 2026 |
| npm | drochaid-citrea:2.0.2 | Mhà 18, 2026 |
| npm | citrea-utils:2.0.2 | Mhà 18, 2026 |
| npm | @zentrafinance/seòrsaichean:2.0.2 | Mhà 18, 2026 |
| npm | apexomni-node:1.0.0 | Mhà 19, 2026 |
| npm | malairt-apex: 1.0.0 | Mhà 19, 2026 |
| npm | malairt-apex: 1.0.1 | Mhà 19, 2026 |
| npm | ceanglaiche-apex: 1.0.4 | Mhà 19, 2026 |
| npm | apexpro-node:1.0.2 | Mhà 19, 2026 |
| npm | ceanglaiche-apex: 1.0.3 | Mhà 19, 2026 |
| npm | apexomni-node:1.0.2 | Mhà 19, 2026 |
| npm | malairt-apex: 1.0.2 | Mhà 19, 2026 |
| npm | apexpro-node:1.0.3 | Mhà 19, 2026 |
| npm | forge-jsxy:1.0.81 | Mhà 19, 2026 |
| npm | forge-jsxy:1.0.90 | Mhà 19, 2026 |
| npm | corran-pasgadh: 0.2.1 | Mhà 20, 2026 |
| npm | @doctolib-apps/seirbheisean-pearsanta-dùthchasach:99.99.99 | Mhà 21, 2026 |
| npm | @doctolib-apps/seirbheisean-pearsanta-dùthchasach:1.0.0 | Mhà 21, 2026 |
| npm | @doctolib-apps/seirbheisean-pearsanta-dùthchasach:1.0.1 | Mhà 21, 2026 |
| pypi | kanga-hack:1.0.4 | Mhà 21, 2026 |
| pypi | libhmac:0.8.28.1 | Mhà 21, 2026 |
| npm | @limebike/supreme-data-grid:85.14.44 | Mhà 21, 2026 |
| npm | @limebike/supreme-date-pickers:85.14.44 | Mhà 21, 2026 |
| npm | @limebike/supreme-data-grid:85.14.48 | Mhà 21, 2026 |
| pypi | ai-prishtina-agent-kag: 0.1.0 | Mhà 21, 2026 |
| npm | hehehe:1.0.7 | Mhà 21, 2026 |
| npm | sganair-bagairt-mì-chinnteach: 2.1.2 | Mhà 22, 2026 |
| npm | sgrùdaiche-iuchrach-cleachdaidh: 0.7.3 | Mhà 22, 2026 |
| npm | faireadair-wallet-eth:1.0.9 | Mhà 22, 2026 |
| npm | lorgaire-dìomhaireachdan-lìn3:1.2.6 | Mhà 22, 2026 |
| npm | dìon-seasmhachd-cleachdadh-dìon: 0.4.4 | Mhà 22, 2026 |
| npm | sgrùdadh-sàbhailteachd-mnemonic:0.5.2 | Mhà 22, 2026 |
| npm | sganair-teisteanas-crypto: 2.0.2 | Mhà 22, 2026 |
| npm | dearbhaiche-iuchrach-slabhraidh: 0.2.3 | Mhà 22, 2026 |
| npm | dearbhaiche-iuchrach-slabhraidh: 0.2.4 | Mhà 22, 2026 |
| npm | sgrùdaiche-àrainneachd-defi:0.3.3 | Mhà 22, 2026 |
| npm | sgrùdaiche-iuchrach-cleachdaidh: 1.8.2 | Mhà 22, 2026 |
| npm | sgrùdaiche-àrainneachd-defi:1.4.2 | Mhà 22, 2026 |
| npm | dìon-seasmhachd-cleachdadh-dìon: 1.5.2 | Mhà 22, 2026 |
| npm | neach-dearbhaidh-tèarainteachd-wallet:2.1.3 | Mhà 22, 2026 |
| npm | dìon-seasmhachd-cleachdadh-dìon: 1.5.3 | Mhà 22, 2026 |
| npm | @jaggle/ath-mheudachadhamharc:1.0.1 | Mhà 22, 2026 |
| npm | @jaggle/ath-mheudachadhamharc:1.0.3 | Mhà 22, 2026 |
| npm | @jaggle/ath-mheudachadhamharc:1.0.2 | Mhà 22, 2026 |
| npm | @jaggle/ath-mheudachadhamharc:1.0.5 | Mhà 22, 2026 |
| npm | @jaggle/ath-mheudachadhamharc:1.0.6 | Mhà 22, 2026 |
| npm | sganair-bagairt-mì-chinnteach: 3.2.5 | Mhà 22, 2026 |
| npm | sganair-bagairt-mì-chinnteach: 3.2.4 | Mhà 22, 2026 |
| npm | sgrùdaiche-àrainneachd-defi:1.4.9 | Mhà 22, 2026 |
| npm | lorgaire-dìomhaireachdan-lìn3:2.3.6 | Mhà 22, 2026 |
| npm | neach-dearbhaidh-tèarainteachd-wallet:2.1.6 | Mhà 22, 2026 |
| npm | sgrùdadh-sàbhailteachd-mnemonic:4.0.0 | Mhà 22, 2026 |
| npm | faireadair-wallet-eth:4.0.0 | Mhà 22, 2026 |
| npm | @jaggle/ath-mheudachadhamharc:1.0.7 | Mhà 22, 2026 |
| npm | @jaggle/ath-mheudachadhamharc:1.0.8 | Mhà 22, 2026 |
| npm | @jaggle/ath-mheudachadhamharc:1.0.4 | Mhà 22, 2026 |
Seachdain 2: Còrr is 95 Pasgan air an Lorg
| Ceanglaichean taic | pasgan | Ceann-là |
|---|---|---|
| npm | suidheachadh-cèilidh-buannachaidh:3.0.5 | Mhà 11, 2026 |
| npm | react-icon-svgs:1.0.1 | Mhà 11, 2026 |
| npm | airgead-broc-fosgailte-rpc:201.99.100 | Mhà 11, 2026 |
| npm | goireasan àrainneachd gun-fhrithealaiche: 1.0.0 | Mhà 11, 2026 |
| npm | goireasan àrainneachd gun-fhrithealaiche: 1.0.2 | Mhà 11, 2026 |
| npm | goireasan àrainneachd gun-fhrithealaiche: 1.0.3 | Mhà 11, 2026 |
| npm | còd sahrbruce32:1.0.0 | Mhà 11, 2026 |
| npm | teachdaire_claw:0.0.71 | Mhà 11, 2026 |
| npm | @gbrlxvii/ts-form-utils:2.7.0 | Mhà 11, 2026 |
| npm | pasgan-iar-cheannach: 99.9.19 | Mhà 11, 2026 |
| npm | pasgan-iar-cheannach: 99.9.26 | Mhà 11, 2026 |
| npm | pasgan-iar-cheannach: 100.0.1 | Mhà 11, 2026 |
| npm | pasgan-iar-cheannach: 101.0.3 | Mhà 11, 2026 |
| npm | rsflows-pexml:99.9.15 | Mhà 11, 2026 |
| npm | rsflows-pexml:99.9.20 | Mhà 11, 2026 |
| npm | pasgan-iar-cheannach: 102.0.3 | Mhà 11, 2026 |
| npm | rsflows-pexml:99.9.25 | Mhà 11, 2026 |
| npm | pasgan-iar-cheannach: 1.99.0 | Mhà 11, 2026 |
| npm | surfadh slaodach: 10.0.0 | Mhà 11, 2026 |
| npm | gaol-ears:1.22.12 | Mhà 11, 2026 |
| npm | dit-cèilidh:17.4.2 | Mhà 11, 2026 |
| npm | hehehe:1.0.4 | Mhà 11, 2026 |
| npm | @gbrlxvii/ts-form-utils:3.7.0 | Mhà 11, 2026 |
| npm | teachdaire_claw:0.0.74 | Mhà 11, 2026 |
| fosgailtevsx | dè a nì thu/geug: 1.2.7 | Mhà 11, 2026 |
| fosgailtevsx | george-alisson/html-preview-vscode:1.2.7 | Mhà 11, 2026 |
| fosgailtevsx | luchd-faighinn luchd-suidheachaidh gineadh-java sohibe/java:9.0.2 | Mhà 11, 2026 |
| npm | le luchd-reic: 99.0.6 | Mhà 11, 2026 |
| npm | briantreehttp:0.4.0 | Mhà 11, 2026 |
| npm | cùmhnantan meadhan-latha: 1.0.0 | Mhà 12, 2026 |
| npm | @draftlab/db:0.16.1 | Mhà 12, 2026 |
| npm | @uipath/uipath-python-bridge: 1.0.1 | Mhà 12, 2026 |
| npm | @uipath/aops-policy-tool:0.3.1 | Mhà 12, 2026 |
| npm | @uipath/codedagent-tool:1.0.1 | Mhà 12, 2026 |
| npm | @uipath/gov-tool:0.3.1 | Mhà 12, 2026 |
| npm | @uipath/telemeatraidh:0.0.7 | Mhà 12, 2026 |
| npm | @uipath/inneal-rianachd:0.1.1 | Mhà 12, 2026 |
| npm | @uipath/codedapp-tool:1.0.1 | Mhà 12, 2026 |
| npm | @uipath/insights-sdk:1.0.1 | Mhà 12, 2026 |
| npm | @uipath/inneal-obrach-sruth-cruinneachaidh:0.0.12 | Mhà 12, 2026 |
| npm | @uipath/pacadair-phròiseict:1.1.16 | Mhà 12, 2026 |
| npm | @uipath/poileasaidh-ruigsinneachd-sdk:0.3.1 | Mhà 12, 2026 |
| npm | @uipath/inneal-fuasglaidhean-inghearach:1.0.1 | Mhà 12, 2026 |
| npm | @uipath/integrationservice-sdk: 1.0.2 | Mhà 12, 2026 |
| npm | @uipath/inneal-poileasaidh-ruigsinneachd:0.3.1 | Mhà 12, 2026 |
| npm | @uipath/inneal-catalog-goireasan:0.1.1 | Mhà 12, 2026 |
| npm | @uipath/inneal-àidseant:1.0.1 | Mhà 12, 2026 |
| npm | @uipath/api-workflow-tool:1.0.1 | Mhà 12, 2026 |
| npm | @uipath/inneal-obrach:1.0.1 | Mhà 12, 2026 |
| npm | @uipath/inneal-fuasglaidh:1.0.1 | Mhà 12, 2026 |
| npm | @uipath/vss:0.1.6 | Mhà 12, 2026 |
| npm | @tallyui/co-phàirtean:1.0.1 | Mhà 12, 2026 |
| npm | @squawk/itealaich-math:0.5.4 | Mhà 12, 2026 |
| npm | @squawk/aimsir:0.5.6 | Mhà 12, 2026 |
| npm | @mistralai/mistralai-gcp:1.7.1 | Mhà 12, 2026 |
| npm | @mesadev/saguaro:0.4.22 | Mhà 12, 2026 |
| npm | buidheann-dpduk:0.0.1 | Mhà 12, 2026 |
| npm | @cplace-paw-fe/cf-training-extended:2.0.4 | Mhà 12, 2026 |
| npm | @jacobson1977/suidheachadh-hp:2.0.2 | Mhà 14, 2026 |
| npm | @jacobson1977/suidheachadh-hp:2.0.5 | Mhà 14, 2026 |
| npm | @jacobson1977/suidheachadh-hp:2.0.6 | Mhà 14, 2026 |
| npm | @jacobson1977/suidheachadh-hp:2.0.7 | Mhà 14, 2026 |
| npm | @jacobson1977/suidheachadh-hp:2.0.8 | Mhà 14, 2026 |
| npm | @jacobson1977/suidheachadh-hp:2.0.9 | Mhà 14, 2026 |
| npm | @jacobson1977/suidheachadh-hp:2.1.0 | Mhà 14, 2026 |
| npm | suidheachadh hp:4.0.1 | Mhà 14, 2026 |
| npm | suidheachadh hp:4.0.2 | Mhà 14, 2026 |
| npm | suidheachadh hp:4.1.0 | Mhà 14, 2026 |
| npm | suidheachadh hp:4.1.3 | Mhà 14, 2026 |
| npm | suidheachadh hp:4.1.4 | Mhà 14, 2026 |
| npm | suidheachadh hp:4.1.5 | Mhà 14, 2026 |
| npm | suidheachadh hp:4.1.6 | Mhà 14, 2026 |
| npm | suidheachadh hp:4.1.8 | Mhà 14, 2026 |
| npm | suidheachadh hp:4.1.19 | Mhà 14, 2026 |
| npm | suidheachadh hp:4.1.20 | Mhà 14, 2026 |
| npm | suidheachadh hp:4.2.0 | Mhà 14, 2026 |
| npm | gairm-taighepro:1.0.1 | Mhà 14, 2026 |
| pypi | dearbhairean litreachaidh ai: 1.0.0 | Mhà 14, 2026 |
| pypi | cicada-tg:0.3.6 | Mhà 14, 2026 |
| npm | nód-frithealaiche-deuchainn-smtp:99.2.1 | Mhà 14, 2026 |
| npm | nód-frithealaiche-deuchainn-smtp:99.2.2 | Mhà 14, 2026 |
| npm | @lir-portal/co-phàirtean-lìn:2.0.4 | Mhà 14, 2026 |
| npm | inneal dotenvv: 1.0.1 | Mhà 14, 2026 |
| npm | rimraf-utils:1.0.1 | Mhà 14, 2026 |
| npm | inneal-express: 1.0.0 | Mhà 14, 2026 |
| npm | inneal-express: 1.0.1 | Mhà 14, 2026 |
| npm | goireasan-expresspress:1.0.1 | Mhà 14, 2026 |
| npm | @siostam-dealbhaidh-coopeuch/lìn:999.0.4 | Mhà 14, 2026 |
| npm | @siostam-dealbhaidh-coopeuch/lìn:999.0.3 | Mhà 14, 2026 |
| npm | @siostam-dealbhaidh-coopeuch/lìn:999.0.2 | Mhà 14, 2026 |
| pypi | luchd-gnìomhachaidh py:0.1.0 | Mhà 15, 2026 |
| pypi | luchd-gnìomhachaidh py:0.1.2 | Mhà 15, 2026 |
| npm | hello-world-pkg-value-value-p:1.0.7 | Mhà 15, 2026 |
| npm | hello-world-pkg-value-value-p:1.0.10 | Mhà 15, 2026 |
| npm | axon-enterprise: 1.0.0 | Mhà 15, 2026 |
Seachdain 1: Còrr is 158 Pasgan air an Lorg
| Ceanglaichean taic | pasgan | Ceann-là |
|---|---|---|
| npm | @apple-pay-trust/air a chur dheth:99.0.3 | Mhà 01, 2026 |
| npm | leabharlann-tèarainteachd-a-staigh-ubhal-v99:100.0.1 | Mhà 01, 2026 |
| npm | rianachd-chomharran-fiat:99.1.1 | Mhà 01, 2026 |
| npm | stellar-stablecoin-scripts:99.1.0 | Mhà 01, 2026 |
| npm | node-red-contrib-fox-control-admin:2.0.3 | Mhà 01, 2026 |
| npm | node-red-contrib-fox-control-admin:2.0.4 | Mhà 01, 2026 |
| npm | node-red-contrib-fox-control-admin:2.0.7 | Mhà 01, 2026 |
| npm | seòladair-feusag-dubh:211.0.0 | Mhà 01, 2026 |
| npm | seòladair-feusag-dubh:212.0.0 | Mhà 01, 2026 |
| npm | seòladair-feusag-dubh:213.0.0 | Mhà 01, 2026 |
| npm | seòladair-feusag-dubh:217.0.0 | Mhà 01, 2026 |
| npm | seòladair-feusag-dubh:220.0.0 | Mhà 01, 2026 |
| npm | seòladair-feusag-dubh:221.0.0 | Mhà 01, 2026 |
| npm | seòladair-feusag-dubh:222.0.0 | Mhà 01, 2026 |
| npm | sireanan-caoineadh:211.0.0 | Mhà 01, 2026 |
| npm | sireanan-caoineadh:212.0.0 | Mhà 01, 2026 |
| npm | sireanan-caoineadh:213.0.0 | Mhà 01, 2026 |
| npm | taibhse-fùdair-gunna:212.0.0 | Mhà 01, 2026 |
| npm | taibhse-fùdair-gunna:219.0.0 | Mhà 01, 2026 |
| npm | sruthadh-codewhisperer: 1.0.15 | Mhà 02, 2026 |
| npm | sgadxino:1.0.5 | Mhà 02, 2026 |
| npm | ciosg-dàta-amazon-monorepo:1.0.10 | Mhà 02, 2026 |
| npm | claude-code-best:2.0.1 | Mhà 03, 2026 |
| npm | apexpro:99.99.99 | Mhà 03, 2026 |
| npm | àrd-ìre: 99.99.99 | Mhà 03, 2026 |
| npm | àrd-ìre: 99.99.100 | Mhà 03, 2026 |
| npm | apexpro:99.99.100 | Mhà 03, 2026 |
| npm | fuasgladh-cèilidh-node:1.0.7 | Mhà 03, 2026 |
| npm | fuasgladh-cèilidh-node:1.0.8 | Mhà 03, 2026 |
| npm | @xp-utilities/lìn:99.0.0 | Mhà 03, 2026 |
| npm | nextjs-cabadaich-le-seirbheis-ai:99.9.9 | Mhà 03, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.13 | Mhà 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.14 | Mhà 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.15 | Mhà 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.16 | Mhà 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.17 | Mhà 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.19 | Mhà 04, 2026 |
| npm | @sbt_gitverse/anailis-neach-dèiligidh:99.0.1 | Mhà 04, 2026 |
| npm | @sbt_gitverse/anailis-neach-dèiligidh:99.0.4 | Mhà 04, 2026 |
| npm | @sbt_gitverse/anailis-neach-dèiligidh:99.0.5 | Mhà 04, 2026 |
| npm | @tochka-ui/bun-stèidh:99.0.2 | Mhà 04, 2026 |
| npm | @tochka-ui/bun-stèidh:99.0.3 | Mhà 04, 2026 |
| npm | @tochka-ui/bun-stèidh:99.0.4 | Mhà 04, 2026 |
| npm | kl-b2c-ui-kit:99.0.1 | Mhà 04, 2026 |
| npm | kl-b2c-ui-kit:99.0.2 | Mhà 04, 2026 |
| npm | kl-b2c-ui-kit:99.0.3 | Mhà 04, 2026 |
| npm | pi-exa-mcp:99.9.11 | Mhà 04, 2026 |
| npm | pi-exa-mcp:99.9.12 | Mhà 04, 2026 |
| npm | google-cloud-secret-manaidsear-config-poc:99.9.26 | Mhà 04, 2026 |
| npm | google-cloud-secret-manaidsear-config-poc:99.9.33 | Mhà 04, 2026 |
| npm | google-cloud-secret-manaidsear-config-poc:99.9.34 | Mhà 04, 2026 |
| npm | google-cloud-secret-manaidsear-config-poc:99.9.35 | Mhà 04, 2026 |
| npm | google-cloud-secret-manaidsear-config-poc:99.9.37 | Mhà 04, 2026 |
| npm | google-cloud-secret-manaidsear-config-poc:99.9.38 | Mhà 04, 2026 |
| npm | google-cloud-secret-manaidsear-config-poc:99.9.51 | Mhà 04, 2026 |
| npm | google-cloud-secret-manaidsear-config-poc:99.9.53 | Mhà 04, 2026 |
| npm | drochaid-pàighidhean-paypal:99.9.9 | Mhà 04, 2026 |
| npm | drochaid-pàighidhean-paypal:100.1.1 | Mhà 04, 2026 |
| npm | drochaid-pàighidhean-paypal:100.1.4 | Mhà 04, 2026 |
| npm | drochaid-pàighidhean-paypal:100.1.6 | Mhà 04, 2026 |
| npm | drochaid-pàighidhean-paypal:100.1.9 | Mhà 04, 2026 |
| npm | drochaid-pàighidhean-paypal:100.2.8 | Mhà 04, 2026 |
| npm | eòlas-luchd-obrach-microsoft:99.2.2 | Mhà 05, 2026 |
| npm | sgiath-carp: 0.1.0 | Mhà 05, 2026 |
| npm | fanduel:100.5.0 | Mhà 05, 2026 |
| npm | exiouss:1.0.6 | Mhà 05, 2026 |
| npm | enterprise-cridhe-geata-ùghdarrais:50.50.50 | Mhà 06, 2026 |
| npm | @saif777/codemirror5:7.66.4 | Mhà 06, 2026 |
| npm | @saif777/codemirror5:7.66.5 | Mhà 06, 2026 |
| npm | seirbheis-bratach-feart: 2.0.1 | Mhà 06, 2026 |
| npm | seirbheis-bratach-feart: 2.0.2 | Mhà 06, 2026 |
| npm | seirbheis-bratach-feart: 2.0.3 | Mhà 06, 2026 |
| npm | seòrsa-btree:2.1.2 | Mhà 06, 2026 |
| npm | cridhe-viem:1.0.0 | Mhà 06, 2026 |
| npm | viem-utils-core:1.0.0 | Mhà 06, 2026 |
| npm | goireasan-cridhe-chruaidh:1.0.0 | Mhà 06, 2026 |
| npm | veltrix:1.0.0 | Mhà 06, 2026 |
| npm | evm-utils:1.0.0 | Mhà 06, 2026 |
| npm | web3-utils-core:1.0.0 | Mhà 06, 2026 |
| npm | goireasan-fùirneis: 1.0.0 | Mhà 06, 2026 |
| npm | carboniteapp:99.9.0 | Mhà 07, 2026 |
| npm | carbonite-a-staigh: 99.9.0 | Mhà 07, 2026 |
| npm | airgead-broc-fosgailte-rpc:200.99.100 | Mhà 07, 2026 |
| npm | 24712-pl5006:0.0.1 | Mhà 07, 2026 |
| fosgailtevsx | eriklynd/json-tools:20.1.2 | Mhà 07, 2026 |
| npm | invixco:1.0.4 | Mhà 07, 2026 |
| npm | riochdaire-slàinte-buannachd-sys:1.0.2 | Mhà 08, 2026 |
| npm | suidheachadh-cèilidh-buannachaidh:3.0.6 | Mhà 08, 2026 |
| npm | riochdaire-slàinte-buannachd-sys:1.0.3 | Mhà 08, 2026 |
Dèan cinnteach gu bheil an t-Sèine Solarachaidh Bathar-bog agad tèarainte an aghaidh so-leòntachd agus còd droch-rùnach
Chan eil ionnsaighean slabhraidh solair bathar-bog nan bagairtean teòiridheach tuilleadh. Tha pacaidean droch-rùnach, malware mothachail air AI, ionnsaighean troimh-chèile eisimeileachd, goid teisteanasan, agus innealan luchd-leasachaidh puinnseanta gu gnìomhach ag amas air an latha an-diugh. SDLCs, CI/CD pipelines, agus àrainneachdan leasachaidh le taic bho AI.
Le Lorg-malware Tràth Xygeni agus software supply chain security àrd-ùrlar, faodaidh buidhnean eisimeileachdan droch-rùnach aithneachadh agus a bhacadh mus ruig iad stèiseanan-obrach luchd-leasachaidh, siostaman togail no cinneasachadh pipelines.
Bidh Xygeni a’ cumail sùil leantainneach air eag-shiostaman leithid npm, PyPI, VS Code, agus OpenVSX gus pacaidean droch-rùnach, pàtrain foillseachaidh amharasach, typosquatting, droch dhìol ainmean-àite, giùlan goid teisteanasan, agus bagairtean slabhraidh solair air an stiùireadh le AI a lorg ann an àm fìor. Tha prìomhachas fèin-ghluasadach air na co-dhùnaidhean stèidhichte air comas-brathaidh, ruigsinneachd, agus buaidh obrachaidh gus an urrainn do sgiobaidhean fòcas a chuir air na cunnartan a tha dha-rìribh cudromach.
Bho phasganan npm droch-rùnach agus eisimeileachdan OSS air an lagachadh gu cunnartan còd a chaidh a chruthachadh le AI agus innealan luchd-leasachaidh puinnseanta, bidh Xygeni a’ cuideachadh sgiobaidhean tèarainteachd is innleadaireachd gus faicsinneachd, earbsa agus smachd a chumail air feadh slabhraidh solair bathar-bog an latha an-diugh.
Gus sgrùdadh a dhèanamh air na h-iomairtean malware as ùire agus na pacaidean malware dearbhte a chaidh a lorg leis an Sgioba Tèarainteachd Xygeni, tadhail air an làrach-lìn iomlan. Geàrr-chunntas Còd Mì-rùnach.
Fuirich tèarainte. Fuirich luath. Fuirich fo smachd le Xygeni.
