Kokoke i kēlā me kēia pule, ke nānā nei kā mākou ʻōnaehana ʻike malware i nā tausani o nā pūʻolo hou a hōʻano hou ʻia ma nā papa inoa lehulehu e like me npm lāua ʻo PyPI. Ua hana nui kēia pule.
Ua hōʻoia mākou 198 mau pūʻolo ʻino, ma waena o npm, me nā hihia hou aʻe ma PyPI, OpenVSX, Composer, a me nā hoʻonui VS Code. Ua ʻike ʻia kekahi mau mea ma nā hui i hoʻonohonoho ʻia, me nā hoʻokuʻu ʻino i hoʻopuka pinepine ʻia ma lalo o nā inoa like a i ʻole ma waena o nā ʻohana pūʻolo pili loa. ʻO kahi hihia kū i waho ʻo ia ka sensivity pūʻolo, ka mea i hoʻopiha i ka npm me nā hoʻokuʻu mana he 60 ma ka pae 2.5.x. Ua hoʻokomo ʻia nā hui koʻikoʻi ʻē aʻe ai-sdk-helpers (8 mau mana e kuhikuhi ana i nā mea hoʻomohala AI), @antoncallahan/aws-user-helper (7 mau mana e hoʻohālike ana i kahi pono hana AWS), @apple-pay-trust a @google-pay-trust nā ʻohana (e hoʻohālike ana i nā modula uku uku), @frengki0707/google-cloud-clone (5 mau mana e hoʻopunipuni ana iā Google Cloud), a me cms-storehub, cms-helpgit, a cms-github (e kuhikuhi ana i ka CMS pipelines). Ua hoʻohālike nā pūʻolo he nui i nā modula uku a me ka nānā ʻana, enterprise a me nā pūʻolo pūnaewele kūloko, nā mea kūʻai aku analytics, nā hoʻokumu UI, nā pono hana hoʻomohala, nā mea ʻimi ʻāpana, nā pūʻolo ao- a me Google-themed, a me nā modula ʻē aʻe i hilinaʻi nui ʻia i nā kahe hana hoʻomohala hou.
ʻAʻole kēia he mau ʻano ʻē i hoʻokaʻawale ʻia. ʻO ka mea i kū i waho i kēia pule, ʻo ia ka nui o ka hoʻopuka hou ʻana ma nā ʻohana pūʻolo like, ka hoʻohana hou ʻana i nā ʻano inoa, a me ke ʻano o ka hūnā ʻia ʻana o nā pūʻolo ʻino e like me nā hilinaʻi kūpono i loko o ka lawe ʻana i nā polokalamu maoli. pipelines.
ʻO kēia kiʻi paʻi hebedoma kekahi ʻāpana o kā mākou Malicious Code Digest e hoʻomau nei, kahi a mākou e hōʻoia ai i nā hoʻoweliweli hou a hāʻawi i ka ʻike hana e kōkua i nā hui DevSecOps e pale i kā lākou. pipelines ma mua o ka hiki ʻana mai o ka hōʻino.
E wehewehe kākou i nā mea a kākou i ʻike ai i kēia pule a me ke kumu o kona koʻikoʻi.
| Ke kaiaola | pūʻolo | lā |
|---|---|---|
| npm | @cloudplatform-single-spa/hoʻokele:99.99.100 | E 30, 2026 |
| npm | @cloudplatform-single-spa/svp-s3-storage:99.99.100 | E 30, 2026 |
| npm | @maximvs1538/os-npm:99.0.0 | E 30, 2026 |
| npm | @komo-maʻalahi/ala-pae:99.9.5 | E 30, 2026 |
| npm | @komo-maʻalahi/hoʻopaʻa inoa-waho-fop-navigator:99.9.5 | E 30, 2026 |
| npm | @komo-maʻalahi/ala:99.9.5 | E 30, 2026 |
| npm | @t-in-one/form_product_token:5.7.1 | E 30, 2026 |
| npm | @capibar.chat/ui-kit:99.5.7 | E 30, 2026 |
| vscode | luna-xampp:5.1.3 | E 30, 2026 |
| npm | @template-kamaʻilio/auth:1.0.0 | E 31, 2026 |
| npm | json-i-ka-maʻalahi-graphql-schema:1.0.0 | May 1, 2026 |
| npm | @gs-koho/noi-mālama-mea-kūʻai-:99.0.0 | May 1, 2026 |
| npm | nemo-reporter:1.8.2 | May 1, 2026 |
| npm | cms-github:4.2.4 | May 1, 2026 |
| npm | cms-kōkuagit:4.2.6 | May 1, 2026 |
| npm | cms-kōkuagit:4.2.8 | May 1, 2026 |
| npm | cms-storehub:1.3.4 | May 1, 2026 |
| npm | cms-storehub:1.3.5 | May 1, 2026 |
| npm | cms-storehub:1.3.6 | May 1, 2026 |
| pypi | simtooreal-cli:0.3.0 | May 1, 2026 |
| npm | ka hoʻolālā-wahi-kūʻai-mua:1.1.1 | May 1, 2026 |
| npm | ka hoʻolālā-wahi-kūʻai-mua:1.1.2 | May 1, 2026 |
| npm | kamaʻilio-sdk:2.0.2 | May 1, 2026 |
| npm | veltrix:9.0.0 | May 1, 2026 |
| npm | veltrix:9.0.1 | May 1, 2026 |
| npm | jingmeideshishi:1.0.4 | May 1, 2026 |
| npm | jingmeideshishi:1.0.5 | May 1, 2026 |
| npm | @tse-digital/core:99.0.0 | May 1, 2026 |
| npm | @telenor-se/core:99.0.0 | May 1, 2026 |
| npm | @ownit/core:99.0.0 | May 1, 2026 |
| npm | nā palapala maʻi:75.0.0 | May 1, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.69 | May 1, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.68 | May 1, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.82 | May 1, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.80 | May 1, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.81 | May 1, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.83 | May 1, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.3 | May 1, 2026 |
| npm | @emcd-vue/auth:6.4.9 | May 1, 2026 |
| npm | @emcd-vue/b2b-pay-form:5.7.4 | May 1, 2026 |
| npm | @ccrm/mea hoʻohana-storage-api-axios:5.0.1 | May 2, 2026 |
| npm | ʻike: 2.5.8 | May 2, 2026 |
| npm | ʻike: 2.5.12 | May 2, 2026 |
| npm | ʻike: 2.5.16 | May 2, 2026 |
| npm | ʻike: 2.5.17 | May 2, 2026 |
| npm | ʻike: 2.5.18 | May 2, 2026 |
| npm | ʻike: 2.5.19 | May 2, 2026 |
| npm | ʻike: 2.5.20 | May 2, 2026 |
| npm | ʻike: 2.5.21 | May 2, 2026 |
| npm | ʻike: 2.5.22 | May 2, 2026 |
| npm | ʻike: 2.5.23 | May 2, 2026 |
| npm | ʻike: 2.5.24 | May 2, 2026 |
| npm | ʻike: 2.5.25 | May 2, 2026 |
| npm | ʻike: 2.5.26 | May 2, 2026 |
| npm | ʻike: 2.5.27 | May 2, 2026 |
| npm | ʻike: 2.5.28 | May 2, 2026 |
| npm | ʻike: 2.5.29 | May 2, 2026 |
| npm | ʻike: 2.5.30 | May 2, 2026 |
| npm | ʻike: 2.5.31 | May 2, 2026 |
| npm | ʻike: 2.5.32 | May 2, 2026 |
| npm | ʻike: 2.5.41 | May 2, 2026 |
| npm | ʻike: 2.5.42 | May 2, 2026 |
| npm | ʻike: 2.5.43 | May 2, 2026 |
| npm | ʻike: 2.5.44 | May 2, 2026 |
| npm | ʻike: 2.5.45 | May 2, 2026 |
| npm | ʻike: 2.5.46 | May 2, 2026 |
| npm | meoo-ui-kōkua:1.0.1 | May 2, 2026 |
| npm | @langgraphjs/kit mea hana:1.2.10 | May 2, 2026 |
| npm | eyevox:9.0.1 | May 2, 2026 |
| npm | ʻike: 2.5.53 | May 3, 2026 |
| npm | ʻike: 2.5.54 | May 3, 2026 |
| npm | ʻike: 2.5.55 | May 3, 2026 |
| npm | ʻike: 2.5.56 | May 3, 2026 |
| npm | ʻike: 2.5.57 | May 3, 2026 |
| npm | ʻike: 2.5.61 | May 3, 2026 |
| npm | @sentry-browser-sdk/profiling-node:1.0.1 | May 4, 2026 |
| npm | @sentry-browser-sdk/profiling-node:1.0.2 | May 4, 2026 |
| npm | @sentry-browser-sdk/profiling-node:1.0.5 | May 4, 2026 |
| npm | lawelawe hōʻiliʻili kālā:1.0.0 | May 4, 2026 |
| npm | ʻike: 2.5.67 | May 4, 2026 |
| npm | ʻike: 2.5.68 | May 4, 2026 |
| npm | kumu hoʻohālike-vg:40.0.5 | May 4, 2026 |
| npm | internallib_v346:1.0.3 | May 4, 2026 |
| npm | internallib_v346:1.0.5 | May 4, 2026 |
| npm | internallib_v346:1.0.9 | May 4, 2026 |
| npm | ai-sdk-kōkua:0.2.1 | May 4, 2026 |
| npm | ai-sdk-kōkua:0.3.0 | May 4, 2026 |
| npm | ai-sdk-kōkua:0.3.1 | May 4, 2026 |
| npm | ai-sdk-kōkua:1.1.0 | May 4, 2026 |
| npm | ai-sdk-kōkua:1.1.1 | May 4, 2026 |
| npm | ai-sdk-kōkua:1.3.0 | May 4, 2026 |
| npm | ai-sdk-kōkua:1.4.0 | May 4, 2026 |
| npm | ai-sdk-kōkua:1.4.2 | May 4, 2026 |
| npm | @achuthvp/postinstall-poc:1.0.3 | May 4, 2026 |
| npm | ʻike: 2.5.0 | May 5, 2026 |
| npm | ʻike: 2.5.1 | May 5, 2026 |
| npm | ʻike: 2.5.2 | May 5, 2026 |
| npm | ʻike: 2.5.3 | May 5, 2026 |
| npm | ʻike: 2.5.4 | May 5, 2026 |
| npm | ʻike: 2.5.5 | May 5, 2026 |
| npm | ʻike: 2.5.13 | May 5, 2026 |
| npm | ʻike: 2.5.14 | May 5, 2026 |
| npm | ʻike: 2.5.15 | May 5, 2026 |
| npm | ʻike: 2.5.33 | May 5, 2026 |
| npm | ʻike: 2.5.34 | May 5, 2026 |
| npm | ʻike: 2.5.35 | May 5, 2026 |
| npm | ʻike: 2.5.36 | May 5, 2026 |
| npm | ʻike: 2.5.37 | May 5, 2026 |
| npm | ʻike: 2.5.38 | May 5, 2026 |
| npm | ʻike: 2.5.58 | May 5, 2026 |
| npm | ʻike: 2.5.59 | May 5, 2026 |
| npm | ʻike: 2.5.60 | May 5, 2026 |
| npm | ʻike: 2.5.62 | May 5, 2026 |
| npm | ʻike: 2.5.63 | May 5, 2026 |
| npm | ʻike: 2.5.64 | May 5, 2026 |
| npm | ʻike: 2.5.65 | May 5, 2026 |
| npm | ʻike: 2.5.66 | May 5, 2026 |
| npm | ʻike: 2.5.69 | May 5, 2026 |
E hoʻopaʻa i kāu mau hilinaʻi Open Source mai nā nāwaliwali a me nā code malicious
Mai hoʻokuʻu i nā pūʻolo ʻino e hiki aku i kāu pipelines. Ka ʻIke ʻana i nā polokalamu ʻino mua o Xygeni hāʻawi i kāu hui i ka ʻike manawa maoli i nā hoʻoweliweli koʻikoʻi loa, e hopu ana i nā hilinaʻi ʻino ma mua o ko lākou hoʻopā ʻana i kāu polokalamu.
E like me ka hōʻike ʻana o ka hōʻuluʻulu manaʻo o kēia pule, ʻaʻole e lohi ana ka nui a me ka maʻalea o nā hoʻolaha pūʻolo ʻino. ʻO ke kahe ʻana o ka mana i hoʻonohonoho ʻia, ka hoʻohālike ʻana i nā modula uku, a me nā inoa pūʻolo kani kūloko kekahi o nā hana a nā mea hoʻouka e hoʻohana nei e pakele. standard nā pale. ʻOi aku ka nui o nā mea e pono ai ke alo i kēia mau hoʻoweliweli ma mua o nā loiloi manawa, pono ia i ka nānā mau ʻana ma kēlā me kēia papa inoa inoa e hilinaʻi nei kāu mau hui.
ʻO Xygeni Open Source Security ʻIke ka hopena a ālai i nā pūʻolo ʻino i ka manawa o ka hoʻopuka ʻana, ma o npm, PyPI, a ma ʻō aku. Ma ka hoʻonohonoho mua ʻana i nā nāwaliwali e hōʻike ana i ka pilikia nui loa o ka honua maoli (a me ka hoʻomaʻamaʻa ʻana i ke ala hoʻoponopono no kāu mau hui DevSecOps) kōkua ʻo Xygeni iā ʻoe e mālama i ka hoʻouna ʻana o nā polokalamu palekana a hilinaʻi me ka ʻole o ka hoʻolohi ʻana i ka hoʻomohala ʻana.
