Txais tos rau lub Tsab ntawv xov xwm Xygeni Malicious Code Digest rau lub Rau HliLub hlis no, peb pab neeg tshawb fawb txog kev ruaj ntseg tau lees paub ntau dua 645 pob khoom phem hla npm, PyPI, thiab (thawj zaug) lub khw muag khoom VSCode extension.
Lub Rau Hli tau txhais los ntawm peb qhov sib txawv: kev sib tw ua kom muaj kev sib tsoo ntau dua uas tsim los kom dhau cov npe thaiv, kev nrawm nrawm hauv kev tawm tsam tsom mus rau AI tooling thiab cov txheej txheem kev txhim kho tus neeg sawv cev, thiab kev sib koom ua ke ntawm kev sib cav sib ceg tawm tsam cov npe monorepo sab hauv.
Ntawm cov phiaj xwm tseem ceeb tshaj plaws uas tau sau tseg rau lub hlis no:
- kev xav dej nyab npm nrog ntau dua 70 versions thoob plaws 2.5.x ntau yam, ib qho kev sib tw khiav tawm mus tas li rov tshaj tawm tas li kom nyob ua ntej ntawm kev tshem tawm.
- A ob-yoj Solana typosquat phiaj xwm (Lub Rau Hli 7–8) tau luam tawm 15 pob khoom cuav
@solana-labscov cuab yeej siv ecosystem, tsom mus rau Web3 thiab DeFi cov neeg tsim khoom ncaj qha. - houzidawang806 suav nrog ntau dua 25 qhov versions hauv ib hnub (Lub Rau Hli 13), koom nrog los ntawm cov ntsuas-pipeline-d8k2 luam tawm dua thoob plaws 21 versions ntawm Lub Rau Hli 15-18.
- cov Kev Tsis Meej Pem ntawm CryptoDAO phiaj xwm (Lub Rau Hli 17) tau luam tawm 11 pob ntawm version 99.99.99, txhua tus nqa ib qho payload sweeping zoo sib xws postinstall CI/CD cov tokens, cov ntaub ntawv pov thawj huab, thiab cov lus zais ntawm lub hnab nyiaj crypto.
- Lub lim tiam ntawm Lub Rau Hli 20–26 tau coj cov kev tsom mus rau AI tooling uas muaj zog tshaj plaws ntawm lub hlis: cov neeg pab ollama (20 hom), cov neeg sawv cev qhib-cov neeg pab (23 hom), monoclaude, ai-sdk-helpers, Thiab @langgraphjs/toolkit, txhua yam tau lees paub hauv ib lub lim tiam, ncaj qha tsom mus rau Ollama, OpenAI agents SDK, LangGraph, thiab Claude API kev koom ua ke.
- Ob tug tau lees paub Cov kev txuas ntxiv VSCode phem tau tshwm sim lub hlis no, qhia tias cov neeg tawm tsam tab tom nthuav dav dhau ntawm cov ntawv sau npe pob mus rau hauv qhov chaw tsim khoom nws tus kheej.
Tus qauv txhais ntawm Lub Rau Hli: kev tawm tsam tab tom txav mus rau hauv IDE extensions, AI agent tooling, thiab agentic workflows qhov twg ib pob khoom phem tau teeb tsa tus kheej tsis muaj tib neeg tshuaj xyuas ntawm kev kis tus kab mob thiab kev ua tiav.
Qhov kev hloov tshiab txhua hli no yog ib feem ntawm Xygeni txoj kev tshawb nrhiav txog malware thiab kev hem thawj ntawm cov khoom siv. Yog xav paub ntxiv txog txhua pob khoom phem uas tau lees paub lub hlis no, tshawb xyuas tag nrho Lub Rau Hli Malicious Code Digest thiab kev tshawb fawb cuam tshuam los ntawm Xygeni Security Team.
Lub Lim Tiam 4: Tshawb Pom Ntau Tshaj 201 Pob Khoom
| ecosystem | pob | Hnub |
|---|---|---|
| Lub rau hli ntuj 20, 2026 | ||
| npm | lub tshuab ua haujlwm panrouter: 5.0.2 + 30 versions thoob plaws 5.x–6.x txog rau lub Rau Hli 22 — kev sib tw tseem ceeb ntawm lub lim tiam | Jun 20, 2026 |
| npm | trimprompt:1.0.5 + 4 versions — txuas ntxiv los ntawm lub lim tiam dhau los, tseem ua haujlwm | Jun 20, 2026 |
| npm | monoclaude:1.0.1 + 2 versions — Claude API tooling impersonation | Jun 20, 2026 |
| vscode | orbit-agent-khub-programming-rau-smalltalk:1.206.0 + 1 version — kev txuas ntxiv VSCode phem uas tsom mus rau kev tsim kho tus neeg sawv cev | Jun 20, 2026 |
| npm | simplisafe-gatsby:1.0.1 Kev ua piv txwv ntawm lub npe platform hauv tsev ntse | Jun 20, 2026 |
| Lub rau hli ntuj 21, 2026 | ||
| npm | atlasora-shared:1.0.0 + 6 pob khoom - kev sib koom ua ke ntawm monorepo kev vam khom tsis meej pem: atlasora-api, -client, -sdk, -types, -utils, -config | Jun 21, 2026 |
| npm | apintergrationpost:4.0.2 + 6 versions — kev sau ntawv tsis raug uas txhob txwm tsom mus rau kev koom ua ke ntawm cov cuab yeej | Jun 21, 2026 |
| npm | llm-traces-app:1.0.1 Cov cuab yeej siv los soj ntsuam LLM | Jun 21, 2026 |
| pypi | d0rk3r-telemetry:1.0.0 Pob telemetry uas tsis meej hauv PyPI | Jun 21, 2026 |
| Lub rau hli ntuj 22, 2026 | ||
| pypi | tm-ai:2.91.75 + 7 versions — kev sib tw PyPI version uas muaj dej nyab tas mus li | Jun 22, 2026 |
| pypi | kev thov-cache-py:1.0.4 + 6 versions — PyPI version dej nyab | Jun 22, 2026 |
| pypi | corvinos:0.17.0 + 6 versions — PyPI kev sib tw sau npe ntau | Jun 22, 2026 |
| Lub rau hli ntuj 23, 2026 | ||
| npm | web3-token-helper:1.1.1 + 2 versions — Web3 token utility targeting | Jun 23, 2026 |
| npm | monocross:1.0.1 + 1 version — mono-* naming cluster nrog rau monoclaude thiab monotacos | Jun 23, 2026 |
| Lub rau hli ntuj 24, 2026 | ||
| npm | ollama-helpers:0.1.0 + 19 versions — qhov kev sib tw AI loj tshaj plaws ntawm lub hlis, tsom mus rau Ollama lub sijhawm ua haujlwm AI hauv zos | Jun 24, 2026 |
| npm | cov neeg sawv cev qhib-cov neeg pab: 0.1.1 + 22 versions — kev sib koom tes sib koom tes tsom mus rau OpenAI agents SDK ecosystem | Jun 24, 2026 |
| Lub rau hli ntuj 25, 2026 | ||
| npm | ai-sdk-helpers:1.4.3 Cov cuab yeej AI SDK tsom mus rau @langgraphjs/toolkit:1.2.11 | Jun 25, 2026 |
| npm | tus neeg kos npe-embedder:99.99.99-poc3 + hs-locale-management — HubSpot lub npe sab hauv kev vam khom tsis meej pem, poc suffix lees paub qhov kev tshawb fawb nquag ua haujlwm | Jun 25, 2026 |
| Lub rau hli ntuj 26, 2026 | ||
| npm | cov khoom siv yooj yim-string:1.0.1 + 8 versions suav nrog variant easy-string-kit232 — kev sau npe ntau hauv qab lub npe generic utility | Jun 26, 2026 |
| npm | pob khoom tsis muaj kev nyab xeeb: 1.0.0 + 5 versions - pob khoom muaj npe meej tias yog malicious, lees paub payload, tej zaum yuav sim lossis provocation phiaj xwm | Jun 26, 2026 |
| npm | @vpms/tsim-system:1.1.2 + 2 versions — tsim lub npe chaw ua haujlwm impersonation | Jun 26, 2026 |
Lub Lim Tiam 3: Tshawb Pom Ntau Tshaj 200 Pob Khoom
| ecosystem | pob | Hnub |
|---|---|---|
| Lub rau hli ntuj 13, 2026 | ||
| npm | houzidawang806:1.0.0 + 25 versions thoob plaws 1.0.x–1.2.x suav nrog cov kwvtij houzidawang807 thiab houzidawang808 — kev sib tw tseem ceeb ntawm lub lim tiam | Jun 13, 2026 |
| npm | tus phooj ywg-txais-demo:1.0.2 + 4 versions — kev sib tw ua lag luam rov tshwm sim dua thoob plaws ntau hnub | Jun 13, 2026 |
| npm | tsc-ai:1.2.0 tsc-* pawg: tsc-ai, tsc-mesh, tsc-lotl — CI tooling namespace impersonation | Jun 13, 2026 |
| pypi | neuralbridge-sdk:4.5.4 + 6 versions thoob plaws 4.5.x–5.1.x — kev sib tw PyPI ntau hnub | Jun 13, 2026 |
| Lub rau hli ntuj 15, 2026 | ||
| npm | tus nqi cim-cron:999.0.0 + 6 pob khoom - DeFi infrastructure dependency confusion cluster tsom mus rau sab hauv cron thiab vault tooling | Jun 15, 2026 |
| Lub rau hli ntuj 16, 2026 | ||
| npm | bodega-sdk:9.9.9 + 8 pob khoom — DeFi qiv nyiaj thiab Cardano ecosystem cluster: flow-lending, surf-lending, janus-*, flowcardano, flowdefi | Jun 16, 2026 |
| npm | kev ntsuas xwm txheej-q3x7:1.0.0 + 8 versions — pob khoom hex-suffix dav dav sau npe cov npe saib xyuas ntau yam | Jun 16, 2026 |
| npm | nic-datagov:1.0.0 + 3 pob khoom — kev ua piv txwv ntawm lub npe ntawm lub platform cov ntaub ntawv tsoomfwv: ogd-analytics, ogd-platform, dms-backend | Jun 16, 2026 |
| Lub rau hli ntuj 17, 2026 | ||
| npm | cryptodao-cov ntawv cog lus: 99.99.99 + 10 pob khoom - CryptoDAO kev tsis meej pem ntawm kev vam khom: core, sdk, bot, config, utils, deploy, signer, backend, types | Jun 17, 2026 |
| pypi | teambot-ai:1.48.0 Cov cuab yeej siv AI tus neeg sawv cev tsom rau hauv PyPI | Jun 17, 2026 |
| Lub rau hli ntuj 18, 2026 | ||
| npm | cov ntsuas-pipeline-d8k2:1.0.0 + 20 versions thoob plaws Lub Rau Hli 18 — kev sib tw khiav tawm ib hnub, rov tshaj tawm tas li kom dhau cov npe thaiv | Jun 18, 2026 |
| npm | tsuas yog luam theej xwb: 0.4.5 + 6 versions — version flooding campaign | Jun 18, 2026 |
| npm | xim-utils-dee0:1.0.0 + 5 pob khoom siv hex-suffix dav dav: data-utils, string-tools, type-check, fmt-helpers, metrics-probe — scripted bulk registration | Jun 18, 2026 |
| npm | @azure-lab-services/ml-ts:99.0.0 Azure ML lub npe chaw ua haujlwm impersonation | Jun 18, 2026 |
| Lub rau hli ntuj 19, 2026 | ||
| npm | trimprompt:1.0.2 + trimprompt-hub — tsom mus rau cov cuab yeej tsim kho sai sai | Jun 19, 2026 |
| npm | claude-khob:0.8.6 Kev ua txuj ua li Claude API cov cuab yeej | Jun 19, 2026 |
| pypi | aiaddin-tus neeg sawv cev: 0.1.0 Cov cuab yeej siv AI tus neeg sawv cev tsom rau hauv PyPI | Jun 19, 2026 |
| npm | web3-crypto-chaw nyob-utils:0.1.0 Kev tsom mus rau cov khoom siv Web3 | Jun 19, 2026 |
Lub Lim Tiam 2: Tshawb Pom Ntau Tshaj 135 Pob Khoom
| ecosystem | pob | Hnub |
|---|---|---|
| Lub rau hli ntuj 7, 2026 | ||
| npm | @solana-labs/web3.js:1.0.0 + 5 hom kev hloov pauv — Solana ecosystem typosquat phiaj xwm, thawj nthwv dej | Jun 7, 2026 |
| npm | @jisan901/teamfocus:1.0.0 + 2 versions | Jun 7, 2026 |
| npm | @sflyinc-knapsack/shutterfly-react:999.0.0 Kev tsis meej pem ntawm kev vam khom, qhov version uas nthuav dav | Jun 7, 2026 |
| Lub rau hli ntuj 8, 2026 | ||
| npm | @solana-labs/web3.js:1.98.102 + 9 hom kev hloov pauv — Solana ecosystem typosquat phiaj xwm, nthwv dej thib ob | Jun 8, 2026 |
| pypi | helixagentai:0.1.3 Cov cuab yeej siv AI tus neeg sawv cev tsom rau hauv PyPI | Jun 8, 2026 |
| Lub rau hli ntuj 9, 2026 | ||
| npm | @nstrlabs/sdk:99.0.0 + 7 pob khoom - kev tsis meej pem ntawm kev vam khom tawm tsam lub npe monorepo sab hauv | Jun 9, 2026 |
| npm | @klapp-login-platform/haiv neeg-sdk:99.0.0 + 9 pob khoom — kev ua pov thawj platform impersonation hla ntau lub npe klapp | Jun 9, 2026 |
| npm | blockchain-helper-0:1.0.0 + 7 pob khoom — crypto/DeFi utility cluster uas tsom mus rau Web3 developers | Jun 9, 2026 |
| npm | @card-pci-data/khw:99.0.0 Lub npe chaw rau cov ntaub ntawv ntawm daim npav them nyiaj raug tsom mus rau | Jun 9, 2026 |
| Lub rau hli ntuj 10, 2026 | ||
| npm | morningstar-tsim-system:99.0.0 + 2 versions — kev ua txuj ua tus qauv tsim nyiaj txiag | Jun 10, 2026 |
| Lub rau hli ntuj 11, 2026 | ||
| npm | pocteszep:1.0.1 + 5 versions luam tawm tib hnub | Jun 11, 2026 |
| npm | @coze-common/chaw sib tham:99.1.1 Kev ua piv txwv ntawm AI chat platform namespace | Jun 11, 2026 |
| pypi | telegramlite:1.0.0 + 1 version — kev xa xov platform impersonation hauv PyPI | Jun 11, 2026 |
| Lub rau hli ntuj 12, 2026 | ||
| npm | ecto-corsair-whisper-6f3b9:1.0.18 + 7 ecto-* variants — pawg npe tsis meej | Jun 12, 2026 |
| npm | internallib_v984:1.0.3 + internallib_v557 pawg - 13 versions ntawm cov tsev qiv ntawv sab hauv impostors | Jun 12, 2026 |
| npm | voyager-web:999.0.0 Kev tsis meej pem ntawm kev vam khom, qhov version uas nthuav dav | Jun 12, 2026 |
| pypi | cdjeez:0.32.0 | Jun 12, 2026 |
Lub Lim Tiam 1: Tshawb Pom Ntau Tshaj 118 Pob Khoom
| ecosystem | pob | Hnub |
|---|---|---|
| Tej zaum 30, 2026 | ||
| npm | @cloudplatform-single-spa/kev tswj hwm:99.99.100 Kev tsis meej pem ntawm kev vam khom, qhov version uas nthuav dav | Tej zaum 30, 2026 |
| vscode | xampp-tus thawj tswj: 5.1.3 VSCode extension - kev ua txuj ua tus neeg tsim khoom siv | Tej zaum 30, 2026 |
| Lub rau hli ntuj 1, 2026 | ||
| npm | @tse-digital/core:99.0.0 Kev tsis meej pem ntawm kev vam khom — @telenor-se thiab @ownit kuj raug cuam tshuam | Jun 1, 2026 |
| npm | cms-storehub:1.3.4 + 2 versions, CMS namespace cluster | Jun 1, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.69 + 6 versions, cov lej version uas tau nce siab uas tsom mus rau AWS cov ntaub ntawv pov thawj | Jun 1, 2026 |
| npm | cov ntaub ntawv ntawm tus neeg mob: 75.0.0 Lub hom phiaj ntawm qhov chaw sau npe kho mob | Jun 1, 2026 |
| npm | @emcd-vue/auth:6.4.9 Kev ua txuj ua li lub npe ntawm kev pauv crypto | Jun 1, 2026 |
| pypi | simtooreal-cli:0.3.0 | Jun 1, 2026 |
| Lub rau hli ntuj 2, 2026 | ||
| npm | kev rhiab heev: 2.5.8 + 70 versions thoob plaws 2.5.x ntau yam, Lub Rau Hli 2–5 — kev sib tw tseem ceeb ntawm lub sijhawm ntawd | Jun 2, 2026 |
| npm | @langgraphjs/toolkit:1.2.10 Cov cuab yeej siv LangGraph raug tsom mus rau | Jun 2, 2026 |
| Lub rau hli ntuj 4, 2026 | ||
| npm | @sentry-browser-sdk/profiling-node:1.0.1 + 2 versions, Sentry namespace impersonation | Jun 4, 2026 |
| npm | internallib_v346:1.0.3 + 2 versions, tus neeg dag ntxias hauv tsev qiv ntawv sab hauv | Jun 4, 2026 |
| npm | ai-sdk-helpers:0.2.1 + 7 versions, tsom mus rau AI SDK tooling | Jun 4, 2026 |
Tsum Tsis Pub Muaj Malicious Code Ua Ntej Nws Mus Txog Koj Li Pipeline
Kev hem thawj ntawm cov khoom siv software tau dhau qhov kev xav lawm. Kev tawm tsam tsis meej pem ntawm kev vam khom, cov neeg nyiag daim ntawv pov thawj, cov malware uas tsom mus rau AI, thiab cov cuab yeej tsim khoom lom tau ntaus cov pab pawg tiag tiag hauv kev ua lag luam tiag tiag. SDLCs txhua lub lim tiam.
Xygeni's kev kuaj pom malware thiab platform kev ruaj ntseg ntawm cov khoom xa tuaj muab kev pom tseeb rau cov koom haum kom ntes tau cov kev vam khom phem ua ntej lawv ua tiav ntawm lub tshuab tsim tawm, nkag mus rau hauv lub kaw lus tsim kho, lossis mus txog qhov tsim tawm. Kev them nqi npog npm, PyPI, VSCode, thiab dhau ntawd, saib xyuas cov qauv tshaj tawm tsis meej, kev siv tsis raug ntawm lub npe, kev ntaus ntawv, thiab cov txheej txheem tawm tsam AI-native thaum lawv tshwm sim.
Txhua qhov kev tshawb pom tau muab qhov tseem ceeb los ntawm kev siv tsis raug, kev ncav cuag tau, thiab kev cuam tshuam rau kev lag luam, yog li koj pab neeg tsom mus rau qhov uas xav tau kev kho tiag tiag, tsis yog suab nrov.
Txawm hais tias nws yog ib pob khoom qhib qhov chaw phem, ib lub cuab yeej tsim tawm uas raug cuam tshuam, lossis kev pheej hmoo ntawm AI-generated code, Xygeni ua rau cov pab pawg kev ruaj ntseg thiab engineering ua ntej ib kauj ruam ntawm cov teeb meem kev hem thawj ntawm cov khoom xa tuaj.
Tshawb nrhiav txhua pob khoom phem thiab phiaj xwm uas tau lees paub los ntawm Xygeni Security Team hauv Cov Lus Qhia Txog Cov Code Uas Ua Rau Neeg Phem.
Nyob ruaj ntseg. Nyob ceev. Tswj hwm nrog Xygeni.
