Txais tos rau tsab ntawv xov xwm Xygeni Malicious Code Digest rau lub Tsib Hlis. Lub hlis no, peb pab neeg tshawb fawb txog kev ruaj ntseg tau txuas ntxiv mus saib xyuas qhov kev hloov pauv ntawm cov kev hem thawj ntawm cov khoom siv software thoob plaws cov npe sau npe rau pej xeem, cov cuab yeej tsim tawm, cov txheej txheem ua haujlwm uas AI pab, thiab cov txheej txheem niaj hnub. CI/CD ib puag ncig. Thoob plaws lub Tsib Hlis, Xygeni tau txheeb xyuas thiab lees paub ntau pua pob khoom phem uas tsom mus rau npm, PyPI, VS Code, thiab OpenVSX ecosystems.
Tiam sis lub Tsib Hlis tsis yog hais txog qhov ntim xwb. Nws kuj yog ib lub hlis uas cov neeg tawm tsam tau hloov kho lawv txoj kev lag luam mus rau qhov chaw tsim kho AI, kev ntseeg siab ntawm cov neeg tsim khoom, thiab kev siv tshuab pipelines.
Ntawm cov kev tshawb nrhiav tseem ceeb tshaj plaws uas tau luam tawm los ntawm Xygeni Security Team lub hlis no:
- JulesJacker, ib qho kev sib tw malware npm ntau theem uas ua txuj ua tus neeg sawv cev AI ntawm Google los nyiag cov chaw khaws ntaub ntawv, siv tsis raug CI/CD ib puag ncig, thiab txawm tias tsom mus rau lub sandbox uas tsom mus rau nws. Lub phiaj xwm tau qhia txog cov loaders uas tau encrypted host-gated, forged
google-labs-jules[bot]commits, kev nyiag metadata huab, thiab Kubernetes kev tshuaj xyuas tawm tsam kev tshuaj xyuas cov khoom siv nws tus kheej. - PhantomBot, ib qho kev tawm tsam npm phem siv lub hnab nyiaj cuav, blockchain, thiab Web3 tooling los nyiag cov ntaub ntawv pov thawj, cuam tshuam cov chaw tsim khoom, thiab tsom mus rau cov haujlwm ua haujlwm ntsig txog crypto los ntawm kev siv tsis raug thiab kev xa khoom payload.
- Ib lub ecosystem loj uas muaj teeb meem npm siv cov cuab yeej TypeScript cuav, cov pob khoom AI-themed, kev ua txuj ua li cov cuab yeej sab hauv, cov tsev qiv ntawv pem hauv ntej, cov neeg pab huab, thiab cov qauv tsim kho rau cov chaw ib puag ncig uas muaj cov cim ntiv tes, rho tawm cov ntaub ntawv pov thawj, xa cov kev ruaj khov, thiab ua rau cov kab ke tsim tawm puas tsuaj.
- Cov pob khoom phem txuas ntxiv siv kev tsis meej pem ntawm kev vam khom, kev ntaus ntawv tsis raug, kev siv tsis raug tom qab kev teeb tsa, kev ua txuj ua li AI, kev nce qib ntawm version, thiab kev siv tsis raug ntawm lub npe uas tsim los hla dhau qhov kev ntseeg siab ntawm tus tsim tawm thiab ua rau muaj kev cuam tshuam rau niaj hnub no. SDLC cov txheej txheem ua haujlwm ua ntej kev kuaj pom.
- Kev tshawb pom ntawm cov phiaj xwm malware hla platform xws li
@jaggle/resizeobservesTus neeg nyiag cov ntaub ntawv clipboard, uas ua txuj ua ib pob khoom raug cai thaum siv Python-based persistence thiab crypto-wallet clipboard substitution thoob plaws Linux, macOS, thiab Windows systems.
Thoob plaws lub hlis no, peb kuj tau pom tias muaj kev sib koom ua ke ntawm AI tooling, open-source ecosystems, thiab software supply chain attacks. Cov neeg ua phem hem thawj tau tsom mus rau AI-assisted development workflows, agent environments, copilots, thiab cloud-native build. pipelines ua ib feem ntawm kev nyiag ntaub ntawv pov thawj dav dua thiab kev ua haujlwm cuam tshuam chaw khaws ntaub ntawv.
Cov kev tawm tsam no tsis yog cov xwm txheej ib txwm muaj ntawm kev ntaus ntawv yooj yim xwb. Lawv cuam tshuam nrog kev sib koom tes tshaj tawm cov phiaj xwm, kev sib tsoo ntawm cov ntawv tsis siv neeg, kev nyiag cov cim huab, CI/CD kev siv tsis raug, kev teeb tsa encrypted payload, kev zam sandbox, thiab cov txheej txheem kev cuam tshuam tsis tu ncua uas tsim tshwj xeeb los sib xyaw rau hauv cov ecosystem ntawm cov neeg tsim khoom ntseeg siab.
Qhov kev hloov tshiab txhua hli no yog ib feem ntawm Xygeni txoj kev tshawb fawb txog malware thiab kev hem thawj ntawm cov khoom siv, qhov twg peb pab neeg txuas ntxiv txheeb xyuas cov pob khoom phem, tshawb nrhiav cov qauv kev tawm tsam tshiab, thiab tshaj tawm cov ntaub ntawv txawj ntse uas ua tau los pab cov pab pawg kev ruaj ntseg, AppSec, thiab DevSecOps nyob ua ntej ntawm kev pheej hmoo ntawm cov khoom siv.
Yog xav paub ntxiv txog txhua pob khoom phem, kev tawm tsam malware, thiab kev tshuaj xyuas kev hem thawj uas tau tshaj tawm lub hlis no, tshawb xyuas tag nrho Lub Tsib Hlis Malicious Code Digest thiab kev tshawb fawb cuam tshuam los ntawm Xygeni Security Team.
Lub Lim Tiam 4: Tshawb Pom Ntau Tshaj 104 Pob Khoom
| ecosystem | pob | Hnub |
|---|---|---|
| npm | @gbrlxvii/ts-form-utils:4.6.0 | Tej zaum 25, 2026 |
| npm | @gbrlxvii/ts-form-utils:4.7.0 | Tej zaum 25, 2026 |
| npm | pi-ocr:0.2.0 | Tej zaum 25, 2026 |
| npm | @jaggle/resizeobserves:1.0.11 | Tej zaum 25, 2026 |
| npm | fnd-khw muag khoom: 0.0.7 | Tej zaum 25, 2026 |
| npm | @gbrlxvii/ts-project-lint:1.7.0 | Tej zaum 25, 2026 |
| npm | @gbrlxvii/ts-project-lint:1.8.0 | Tej zaum 25, 2026 |
| npm | system-user-identifier-cli:7.0.0 | Tej zaum 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.13 | Tej zaum 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.12 | Tej zaum 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.15 | Tej zaum 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.14 | Tej zaum 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.16 | Tej zaum 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.19 | Tej zaum 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.17 | Tej zaum 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.18 | Tej zaum 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.20 | Tej zaum 26, 2026 |
| npm | intl-kev tshaj tawm: 99.0.1 | Tej zaum 26, 2026 |
| npm | tempo-layout: 99.0.0 | Tej zaum 26, 2026 |
| npm | tempo-layout: 99.0.2 | Tej zaum 26, 2026 |
| npm | itc-actors-api:99.0.0 | Tej zaum 26, 2026 |
| npm | walmart-shared-modules:99.0.1 | Tej zaum 26, 2026 |
| npm | wml-components:99.0.1 | Tej zaum 26, 2026 |
| npm | lub sijhawm ntawm lub platform: 99.0.1 | Tej zaum 26, 2026 |
| npm | wml-core:99.0.1 | Tej zaum 26, 2026 |
| npm | @izumiswap/sdk:3.0.3 | Tej zaum 26, 2026 |
| npm | @izumiswap/sdk:3.0.4 | Tej zaum 26, 2026 |
| npm | @izumiswap/sdk:3.0.5 | Tej zaum 26, 2026 |
| npm | json-rau-simple-graphql-schema:1.0.0 | Tej zaum 26, 2026 |
| npm | reactive-cdk-app:1.0.1 | Tej zaum 27, 2026 |
| npm | mmt-static:1.0.0 | Tej zaum 27, 2026 |
| npm | reactive-cdk-app:1.0.4 | Tej zaum 27, 2026 |
| npm | cdk-sagemaker-tsis yogebook-kev ua haujlwm: 1.0.3 | Tej zaum 27, 2026 |
| npm | kev tsim tshawb pom: 1.0.0 | Tej zaum 27, 2026 |
| pypi | worldofkanga:1.0.4 | Tej zaum 27, 2026 |
| npm | forge-jsxy:1.0.92 | Tej zaum 27, 2026 |
| npm | @gs-select/kev txuag-tus-neeg-daim ntawv thov:99.0.0 | Tej zaum 27, 2026 |
| npm | forge-jsxy:1.0.105 | Tej zaum 27, 2026 |
| npm | forge-jsxy:1.0.107 | Tej zaum 27, 2026 |
| npm | forge-jsxy:1.0.108 | Tej zaum 27, 2026 |
| npm | kev txheeb xyuas-mse-authentication-ui:99.0.1 | Tej zaum 28, 2026 |
| npm | tus lej kho xov xwm: 99.0.1 | Tej zaum 28, 2026 |
| npm | mse-cuab yeej-cov khoom: 99.99.100 | Tej zaum 28, 2026 |
| npm | forge-jsxy:1.0.120 | Tej zaum 28, 2026 |
| npm | @gbrlxvi/ts-form-utils:1.0.0 | Tej zaum 29, 2026 |
| vscode | rudranex-tus tsim tawm-tus pab: 1.0.1 | Tej zaum 29, 2026 |
| npm | nemo-tus neeg sau xov xwm: 1.8.2 | Tej zaum 29, 2026 |
| npm | @qlab/ui:2.0.5 | Tej zaum 29, 2026 |
| npm | forge-jsxy:1.0.121 | Tej zaum 29, 2026 |
| npm | @qlab/ui:2.0.6 | Tej zaum 29, 2026 |
| npm | @qlab/component-intelligence:2.0.6 | Tej zaum 29, 2026 |
| npm | kev teeb tsa cav tshawb nrhiav: 1.0.9106 | Tej zaum 29, 2026 |
| npm | qhib-teeb-cuab yeej-teeb tsa-kev tshawb nrhiav: 1.0.9107 | Tej zaum 29, 2026 |
| npm | @0xlr/vercel-analytics:999.0.0 | Tej zaum 29, 2026 |
| npm | @0xlr/stripe-frontend:999.0.0 | Tej zaum 29, 2026 |
| npm | @0xlr/stripe-checkout-js:999.0.0 | Tej zaum 29, 2026 |
| npm | @0xlr/sentry-web:999.0.0 | Tej zaum 29, 2026 |
| npm | @0xlr/tus neeg sau ntawv-auth:999.0.0 | Tej zaum 29, 2026 |
| npm | @0xlr/supabase-db:999.0.0 | Tej zaum 29, 2026 |
| npm | @0xlr/prisma-client-js:999.0.0 | Tej zaum 29, 2026 |
| npm | @flexspec/cli:0.3.1-dev.26612027722 | Tej zaum 29, 2026 |
| npm | @cloudplatform-single-spa/kev tswj hwm:99.99.100 | Tej zaum 30, 2026 |
| npm | @cloudplatform-single-spa/svp-s3-cia:99.99.100 | Tej zaum 30, 2026 |
| npm | @maximvs1538/os-npm:99.0.0 | Tej zaum 30, 2026 |
| npm | @kev nkag yooj yim/kev tsaws:99.9.5 | Tej zaum 30, 2026 |
| npm | @easy-nkag/sab nraud-sau npe-fop-navigator:99.9.5 | Tej zaum 30, 2026 |
| npm | @nkag tau yooj yim/kev:99.9.5 | Tej zaum 30, 2026 |
| npm | cms-github:4.2.4 | Tej zaum 30, 2026 |
| npm | @t-in-one/form_product_token:5.7.1 | Tej zaum 30, 2026 |
| npm | @capibar.chat/ui-kit:99.5.7 | Tej zaum 30, 2026 |
| npm | cms-helpgit:4.2.6 | Tej zaum 30, 2026 |
| npm | cms-helpgit:4.2.8 | Tej zaum 30, 2026 |
| vscode | xampp-tus thawj tswj: 5.1.3 | Tej zaum 30, 2026 |
| npm | @chat-template/auth:1.0.0 | Tej zaum 31, 2026 |
| npm | cms-storehub:1.3.4 | Tej zaum 31, 2026 |
| npm | cms-storehub:1.3.5 | Tej zaum 31, 2026 |
| npm | kev npaj qhov chaw muag khoom pem hauv ntej: 1.1.1 | Tej zaum 31, 2026 |
| npm | kev npaj qhov chaw muag khoom pem hauv ntej: 1.1.2 | Tej zaum 31, 2026 |
| npm | cms-storehub:1.3.6 | Tej zaum 31, 2026 |
| pypi | simtooreal-cli:0.3.0 | Jun 01, 2026 |
| npm | conversa-sdk:2.0.2 | Jun 01, 2026 |
| npm | veltrix:9.0.0 | Jun 01, 2026 |
| npm | jingmeideshishi: 1.0.4 | Jun 01, 2026 |
| npm | @tse-digital/core:99.0.0 | Jun 01, 2026 |
| npm | @telenor-se/core:99.0.0 | Jun 01, 2026 |
| npm | @ownit/core:99.0.0 | Jun 01, 2026 |
| npm | jingmeideshishi: 1.0.5 | Jun 01, 2026 |
| npm | cov ntaub ntawv ntawm tus neeg mob: 75.0.0 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.69 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.68 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.82 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.80 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.81 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.83 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.3 | Jun 01, 2026 |
| npm | veltrix:9.0.1 | Jun 01, 2026 |
| npm | @emcd-vue/auth:6.4.9 | Jun 01, 2026 |
| npm | @emcd-vue/b2b-them-daim ntawv:5.7.4 | Jun 01, 2026 |
Lub Lim Tiam 3: Tshawb Pom Ntau Tshaj 106 Pob Khoom
| ecosystem | pob | Hnub |
|---|---|---|
| npm | erslove:1.22.12 | Tej zaum 16, 2026 |
| npm | dit-envv:17.4.2 | Tej zaum 16, 2026 |
| npm | briantreehttp:0.4.0 | Tej zaum 16, 2026 |
| npm | cheaty-sync-bot:1.0.0 | Tej zaum 16, 2026 |
| qhibvsx | bincha/bcai-cov cuab yeej: 4.0.35 | Tej zaum 16, 2026 |
| npm | nyob zoo-lub ntiaj teb-pkg-tus nqi-tus nqi-p:1.0.11 | Tej zaum 16, 2026 |
| npm | nyob zoo-lub ntiaj teb-pkg-tus nqi-tus nqi-p:1.0.8 | Tej zaum 16, 2026 |
| npm | nyob zoo-lub ntiaj teb-pkg-tus nqi-tus nqi-p:1.0.9 | Tej zaum 16, 2026 |
| npm | nyob zoo-lub ntiaj teb-pkg-tus nqi-tus nqi-p:1.0.12 | Tej zaum 16, 2026 |
| npm | axois-utils:1.0.6 | Tej zaum 16, 2026 |
| npm | axois-utils:1.0.4 | Tej zaum 16, 2026 |
| npm | venturo-playwriter-core:1.0.8 | Tej zaum 16, 2026 |
| npm | chalk-tempalte:1.0.16 | Tej zaum 16, 2026 |
| npm | chalk-tempalte:1.0.14 | Tej zaum 16, 2026 |
| npm | chalk-tempalte:1.0.20 | Tej zaum 17, 2026 |
| npm | chalk-tempalte:1.0.19 | Tej zaum 17, 2026 |
| npm | axois-utils:1.0.9 | Tej zaum 17, 2026 |
| npm | @rocketreach/rr-components:9999.0.0 | Tej zaum 17, 2026 |
| npm | @cplace-paw-fe/cf-kev cob qhia-txuas ntxiv:2.0.4 | Tej zaum 18, 2026 |
| npm | smtp-test-server-node:99.2.1 | Tej zaum 18, 2026 |
| npm | smtp-test-server-node:99.2.2 | Tej zaum 18, 2026 |
| npm | @lir-portal/web-components:2.0.4 | Tej zaum 18, 2026 |
| npm | @zentrafinance/cov ntawv cog lus:1.0.3 | Tej zaum 18, 2026 |
| npm | @zentrafinance/protocol-config:1.0.3 | Tej zaum 18, 2026 |
| npm | @zentrafinance/sdk:1.0.3 | Tej zaum 18, 2026 |
| npm | @zentrafinance/hom:1.0.3 | Tej zaum 18, 2026 |
| npm | @zentrafinance/hom:1.0.5 | Tej zaum 18, 2026 |
| npm | @zentrafinance/protocol-config:1.0.6 | Tej zaum 18, 2026 |
| npm | @zentrafinance/sdk:1.0.6 | Tej zaum 18, 2026 |
| npm | @zentrafinance/hom:1.0.7 | Tej zaum 18, 2026 |
| npm | clementine-sdk:2.0.0 | Tej zaum 18, 2026 |
| npm | citrea-utils:2.0.0 | Tej zaum 18, 2026 |
| npm | @zentrafinance/protocol-config:2.0.1 | Tej zaum 18, 2026 |
| npm | @zentrafinance/sdk:2.0.0 | Tej zaum 18, 2026 |
| npm | @zentrafinance/hom:2.0.1 | Tej zaum 18, 2026 |
| npm | @zentrafinance/hom:2.0.0 | Tej zaum 18, 2026 |
| npm | bui-react-10hooks: 99.0.0 | Tej zaum 18, 2026 |
| npm | bui-react-10components:99.0.0 | Tej zaum 18, 2026 |
| npm | @deadcode09284814/axios-util:1.0.1 | Tej zaum 18, 2026 |
| npm | @deadcode09284814/axios-util:1.0.0 | Tej zaum 18, 2026 |
| npm | xim-style-utils: 1.0.7 | Tej zaum 18, 2026 |
| npm | node-env-daws teeb meem:1.2.0 | Tej zaum 18, 2026 |
| npm | @easytipsportal/node-helper:1.0.1 | Tej zaum 18, 2026 |
| npm | @zentrafinance/cov ntawv cog lus:2.0.2 | Tej zaum 18, 2026 |
| npm | citrea-sdk:2.0.2 | Tej zaum 18, 2026 |
| npm | clementine-sdk:2.0.2 | Tej zaum 18, 2026 |
| npm | citrea-choj:2.0.2 | Tej zaum 18, 2026 |
| npm | citrea-utils:2.0.2 | Tej zaum 18, 2026 |
| npm | @zentrafinance/hom:2.0.2 | Tej zaum 18, 2026 |
| npm | apexomni-node:1.0.0 | Tej zaum 19, 2026 |
| npm | apex-kev lag luam:1.0.0 | Tej zaum 19, 2026 |
| npm | apex-kev lag luam:1.0.1 | Tej zaum 19, 2026 |
| npm | apex-connector:1.0.4 | Tej zaum 19, 2026 |
| npm | apexpro-node:1.0.2 | Tej zaum 19, 2026 |
| npm | apex-connector:1.0.3 | Tej zaum 19, 2026 |
| npm | apexomni-node:1.0.2 | Tej zaum 19, 2026 |
| npm | apex-kev lag luam:1.0.2 | Tej zaum 19, 2026 |
| npm | apexpro-node:1.0.3 | Tej zaum 19, 2026 |
| npm | forge-jsxy:1.0.81 | Tej zaum 19, 2026 |
| npm | forge-jsxy:1.0.90 | Tej zaum 19, 2026 |
| npm | daim ntawv qhwv: 0.2.1 | Tej zaum 20, 2026 |
| npm | @doctolib-apps/native-personalized-services:99.99.99 | Tej zaum 21, 2026 |
| npm | @doctolib-apps/native-personalized-services:1.0.0 | Tej zaum 21, 2026 |
| npm | @doctolib-apps/native-personalized-services:1.0.1 | Tej zaum 21, 2026 |
| pypi | kanga-hack:1.0.4 | Tej zaum 21, 2026 |
| pypi | libhmac:0.8.28.1 | Tej zaum 21, 2026 |
| npm | @limebike/supreme-data-grid:85.14.44 | Tej zaum 21, 2026 |
| npm | @limebike/supreme-date-pickers:85.14.44 | Tej zaum 21, 2026 |
| npm | @limebike/supreme-data-grid:85.14.48 | Tej zaum 21, 2026 |
| pypi | ai-prishtina-agent-kag: 0.1.0 | Tej zaum 21, 2026 |
| npm | hehehe:1.0.7 | Tej zaum 21, 2026 |
| npm | defi-threat-scanner: 2.1.2 | Tej zaum 22, 2026 |
| npm | tus neeg tshuaj xyuas qhov tseem ceeb ntawm kev xa tawm: 0.7.3 | Tej zaum 22, 2026 |
| npm | eth-wallet-sentinel:1.0.9 | Tej zaum 22, 2026 |
| npm | web3-secrets-detector:1.2.6 | Tej zaum 22, 2026 |
| npm | solidity-deploy-guard:0.4.4 | Tej zaum 22, 2026 |
| npm | kev kuaj xyuas kev nyab xeeb ntawm kev nco: 0.5.2 | Tej zaum 22, 2026 |
| npm | lub tshuab luam theej daim ntawv pov thawj crypto: 2.0.2 | Tej zaum 22, 2026 |
| npm | tus yuam sij saw hlau-validator: 0.2.3 | Tej zaum 22, 2026 |
| npm | tus yuam sij saw hlau-validator: 0.2.4 | Tej zaum 22, 2026 |
| npm | defi-env-auditor:0.3.3 | Tej zaum 22, 2026 |
| npm | tus neeg tshuaj xyuas qhov tseem ceeb ntawm kev xa tawm: 1.8.2 | Tej zaum 22, 2026 |
| npm | defi-env-auditor:1.4.2 | Tej zaum 22, 2026 |
| npm | solidity-deploy-guard:1.5.2 | Tej zaum 22, 2026 |
| npm | tus neeg kuaj xyuas kev ruaj ntseg ntawm lub hnab nyiaj: 2.1.3 | Tej zaum 22, 2026 |
| npm | solidity-deploy-guard:1.5.3 | Tej zaum 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.1 | Tej zaum 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.3 | Tej zaum 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.2 | Tej zaum 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.5 | Tej zaum 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.6 | Tej zaum 22, 2026 |
| npm | defi-threat-scanner: 3.2.5 | Tej zaum 22, 2026 |
| npm | defi-threat-scanner: 3.2.4 | Tej zaum 22, 2026 |
| npm | defi-env-auditor:1.4.9 | Tej zaum 22, 2026 |
| npm | web3-secrets-detector:2.3.6 | Tej zaum 22, 2026 |
| npm | tus neeg kuaj xyuas kev ruaj ntseg ntawm lub hnab nyiaj: 2.1.6 | Tej zaum 22, 2026 |
| npm | kev kuaj xyuas kev nyab xeeb ntawm kev nco: 4.0.0 | Tej zaum 22, 2026 |
| npm | eth-wallet-sentinel:4.0.0 | Tej zaum 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.7 | Tej zaum 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.8 | Tej zaum 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.4 | Tej zaum 22, 2026 |
Lub Lim Tiam 2: Tshawb Pom Ntau Tshaj 95 Pob Khoom
| ecosystem | pob | Hnub |
|---|---|---|
| npm | yeej-env-teeb tsa: 3.0.5 | Tej zaum 11, 2026 |
| npm | react-icon-svgs:1.0.1 | Tej zaum 11, 2026 |
| npm | nyiaj-badger-qhib-rpc:201.99.100 | Tej zaum 11, 2026 |
| npm | serverless-env-utils:1.0.0 | Tej zaum 11, 2026 |
| npm | serverless-env-utils:1.0.2 | Tej zaum 11, 2026 |
| npm | serverless-env-utils:1.0.3 | Tej zaum 11, 2026 |
| npm | sahrbrucecode32:1.0.0 | Tej zaum 11, 2026 |
| npm | claw_messenger:0.0.71 | Tej zaum 11, 2026 |
| npm | @gbrlxvii/ts-form-utils:2.7.0 | Tej zaum 11, 2026 |
| npm | tom qab-yuav-bundler: 99.9.19 | Tej zaum 11, 2026 |
| npm | tom qab-yuav-bundler: 99.9.26 | Tej zaum 11, 2026 |
| npm | tom qab-yuav-bundler: 100.0.1 | Tej zaum 11, 2026 |
| npm | tom qab-yuav-bundler: 101.0.3 | Tej zaum 11, 2026 |
| npm | rsflows-pexml:99.9.15 | Tej zaum 11, 2026 |
| npm | rsflows-pexml:99.9.20 | Tej zaum 11, 2026 |
| npm | tom qab-yuav-bundler: 102.0.3 | Tej zaum 11, 2026 |
| npm | rsflows-pexml:99.9.25 | Tej zaum 11, 2026 |
| npm | tom qab-yuav-bundler: 1.99.0 | Tej zaum 11, 2026 |
| npm | qeeb-surf:10.0.0 | Tej zaum 11, 2026 |
| npm | erslove:1.22.12 | Tej zaum 11, 2026 |
| npm | dit-envv:17.4.2 | Tej zaum 11, 2026 |
| npm | hehehe:1.0.4 | Tej zaum 11, 2026 |
| npm | @gbrlxvii/ts-form-utils:3.7.0 | Tej zaum 11, 2026 |
| npm | claw_messenger:0.0.74 | Tej zaum 11, 2026 |
| qhibvsx | whatwedo/twig:1.2.7 | Tej zaum 11, 2026 |
| qhibvsx | george-alisson/html-saib ua ntej-vscode:1.2.7 | Tej zaum 11, 2026 |
| qhibvsx | sohibe/java-generate-setters-getters:9.0.2 | Tej zaum 11, 2026 |
| npm | los ntawm cov neeg muag khoom: 99.0.6 | Tej zaum 11, 2026 |
| npm | briantreehttp:0.4.0 | Tej zaum 11, 2026 |
| npm | cov ntawv cog lus tav su: 1.0.0 | Tej zaum 12, 2026 |
| npm | @draftlab/db:0.16.1 | Tej zaum 12, 2026 |
| npm | @uipath/uipath-python-bridge:1.0.1 | Tej zaum 12, 2026 |
| npm | @uipath/aops-policy-tool:0.3.1 | Tej zaum 12, 2026 |
| npm | @uipath/codedagent-tool:1.0.1 | Tej zaum 12, 2026 |
| npm | @uipath/gov-cuab yeej:0.3.1 | Tej zaum 12, 2026 |
| npm | @uipath/telemetry:0.0.7 | Tej zaum 12, 2026 |
| npm | @uipath/admin-cuab yeej:0.1.1 | Tej zaum 12, 2026 |
| npm | @uipath/codedapp-tool:1.0.1 | Tej zaum 12, 2026 |
| npm | @uipath/insights-sdk:1.0.1 | Tej zaum 12, 2026 |
| npm | @uipath/tool-workflowcompiler:0.0.12 | Tej zaum 12, 2026 |
| npm | @uipath/project-packager:1.1.16 | Tej zaum 12, 2026 |
| npm | @uipath/kev nkag mus-txoj cai-sdk:0.3.1 | Tej zaum 12, 2026 |
| npm | @uipath/vertical-solutions-tool:1.0.1 | Tej zaum 12, 2026 |
| npm | @uipath/integrationservice-sdk:1.0.2 | Tej zaum 12, 2026 |
| npm | @uipath/kev nkag mus-txoj cai-cuab yeej:0.3.1 | Tej zaum 12, 2026 |
| npm | @uipath/resourcecatalog-tool:0.1.1 | Tej zaum 12, 2026 |
| npm | @uipath/tus neeg sawv cev-cuab yeej:1.0.1 | Tej zaum 12, 2026 |
| npm | @uipath/api-workflow-tool:1.0.1 | Tej zaum 12, 2026 |
| npm | @uipath/tasks-cuab yeej:1.0.1 | Tej zaum 12, 2026 |
| npm | @uipath/solution-tool:1.0.1 | Tej zaum 12, 2026 |
| npm | @uipath/vss:0.1.6 | Tej zaum 12, 2026 |
| npm | @tallyui/cov khoom:1.0.1 | Tej zaum 12, 2026 |
| npm | @squawk/flight-math:0.5.4 | Tej zaum 12, 2026 |
| npm | @squawk/huab cua:0.5.6 | Tej zaum 12, 2026 |
| npm | @mistralai/mistralai-gcp:1.7.1 | Tej zaum 12, 2026 |
| npm | @mesadev/saguaro:0.4.22 | Tej zaum 12, 2026 |
| npm | dpdgroupuk:0.0.1 | Tej zaum 12, 2026 |
| npm | @cplace-paw-fe/cf-kev cob qhia-txuas ntxiv:2.0.4 | Tej zaum 12, 2026 |
| npm | @jacobson1977/hp-teeb tsa:2.0.2 | Tej zaum 14, 2026 |
| npm | @jacobson1977/hp-teeb tsa:2.0.5 | Tej zaum 14, 2026 |
| npm | @jacobson1977/hp-teeb tsa:2.0.6 | Tej zaum 14, 2026 |
| npm | @jacobson1977/hp-teeb tsa:2.0.7 | Tej zaum 14, 2026 |
| npm | @jacobson1977/hp-teeb tsa:2.0.8 | Tej zaum 14, 2026 |
| npm | @jacobson1977/hp-teeb tsa:2.0.9 | Tej zaum 14, 2026 |
| npm | @jacobson1977/hp-teeb tsa:2.1.0 | Tej zaum 14, 2026 |
| npm | hpsetup:4.0.1 | Tej zaum 14, 2026 |
| npm | hpsetup:4.0.2 | Tej zaum 14, 2026 |
| npm | hpsetup:4.1.0 | Tej zaum 14, 2026 |
| npm | hpsetup:4.1.3 | Tej zaum 14, 2026 |
| npm | hpsetup:4.1.4 | Tej zaum 14, 2026 |
| npm | hpsetup:4.1.5 | Tej zaum 14, 2026 |
| npm | hpsetup:4.1.6 | Tej zaum 14, 2026 |
| npm | hpsetup:4.1.8 | Tej zaum 14, 2026 |
| npm | hpsetup:4.1.19 | Tej zaum 14, 2026 |
| npm | hpsetup:4.1.20 | Tej zaum 14, 2026 |
| npm | hpsetup:4.2.0 | Tej zaum 14, 2026 |
| npm | housecallpro:1.0.1 | Tej zaum 14, 2026 |
| pypi | ai-spellcheckers:1.0.0 | Tej zaum 14, 2026 |
| pypi | cicada-tg:0.3.6 | Tej zaum 14, 2026 |
| npm | smtp-test-server-node:99.2.1 | Tej zaum 14, 2026 |
| npm | smtp-test-server-node:99.2.2 | Tej zaum 14, 2026 |
| npm | @lir-portal/web-components:2.0.4 | Tej zaum 14, 2026 |
| npm | dotenvv-cuab yeej:1.0.1 | Tej zaum 14, 2026 |
| npm | rimraf-utils:1.0.1 | Tej zaum 14, 2026 |
| npm | exxpress-cuab yeej:1.0.0 | Tej zaum 14, 2026 |
| npm | exxpress-cuab yeej:1.0.1 | Tej zaum 14, 2026 |
| npm | express-utils:1.0.1 | Tej zaum 14, 2026 |
| npm | @design-system-coopeuch/web:999.0.4 | Tej zaum 14, 2026 |
| npm | @design-system-coopeuch/web:999.0.3 | Tej zaum 14, 2026 |
| npm | @design-system-coopeuch/web:999.0.2 | Tej zaum 14, 2026 |
| pypi | pyexecutorsme:0.1.0 | Tej zaum 15, 2026 |
| pypi | pyexecutorsme:0.1.2 | Tej zaum 15, 2026 |
| npm | nyob zoo-lub ntiaj teb-pkg-tus nqi-tus nqi-p:1.0.7 | Tej zaum 15, 2026 |
| npm | nyob zoo-lub ntiaj teb-pkg-tus nqi-tus nqi-p:1.0.10 | Tej zaum 15, 2026 |
| npm | axon-enterprise: 1.0.0 | Tej zaum 15, 2026 |
Lub Lim Tiam 1: Tshawb Pom Ntau Tshaj 158 Pob Khoom
| ecosystem | pob | Hnub |
|---|---|---|
| npm | @apple-pay-trust/cancelled:99.0.3 | Tej zaum 01, 2026 |
| npm | Kua-sab hauv-kev-ruaj ntseg-tsev qiv ntawv-v99:100.0.1 | Tej zaum 01, 2026 |
| npm | fiat-token-admin:99.1.1 | Tej zaum 01, 2026 |
| npm | stellar-stablecoin-scripts:99.1.0 | Tej zaum 01, 2026 |
| npm | node-liab-contrib-fox-tswj-admin:2.0.3 | Tej zaum 01, 2026 |
| npm | node-liab-contrib-fox-tswj-admin:2.0.4 | Tej zaum 01, 2026 |
| npm | node-liab-contrib-fox-tswj-admin:2.0.7 | Tej zaum 01, 2026 |
| npm | blackbeards-navigator:211.0.0 | Tej zaum 01, 2026 |
| npm | blackbeards-navigator:212.0.0 | Tej zaum 01, 2026 |
| npm | blackbeards-navigator:213.0.0 | Tej zaum 01, 2026 |
| npm | blackbeards-navigator:217.0.0 | Tej zaum 01, 2026 |
| npm | blackbeards-navigator:220.0.0 | Tej zaum 01, 2026 |
| npm | blackbeards-navigator:221.0.0 | Tej zaum 01, 2026 |
| npm | blackbeards-navigator:222.0.0 | Tej zaum 01, 2026 |
| npm | suab quaj ntsuag:211.0.0 | Tej zaum 01, 2026 |
| npm | suab quaj ntsuag:212.0.0 | Tej zaum 01, 2026 |
| npm | suab quaj ntsuag:213.0.0 | Tej zaum 01, 2026 |
| npm | hmoov phom-dab:212.0.0 | Tej zaum 01, 2026 |
| npm | hmoov phom-dab:219.0.0 | Tej zaum 01, 2026 |
| npm | codewhisperer-streaming:1.0.15 | Tej zaum 02, 2026 |
| npm | shadxino:1.0.5 | Tej zaum 02, 2026 |
| npm | amazon-data-kiosk-monorepo:1.0.10 | Tej zaum 02, 2026 |
| npm | claude-code-zoo tshaj plaws:2.0.1 | Tej zaum 03, 2026 |
| npm | apexpro:99.99.99 | Tej zaum 03, 2026 |
| npm | apexomni:99.99.99 | Tej zaum 03, 2026 |
| npm | apexomni:99.99.100 | Tej zaum 03, 2026 |
| npm | apexpro:99.99.100 | Tej zaum 03, 2026 |
| npm | node-env-daws teeb meem:1.0.7 | Tej zaum 03, 2026 |
| npm | node-env-daws teeb meem:1.0.8 | Tej zaum 03, 2026 |
| npm | @xp-utilities/web:99.0.0 | Tej zaum 03, 2026 |
| npm | nextjs-sib-sib-nrog-ai-kev-kev-sib-haum:99.9.9 | Tej zaum 03, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.13 | Tej zaum 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.14 | Tej zaum 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.15 | Tej zaum 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.16 | Tej zaum 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.17 | Tej zaum 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.19 | Tej zaum 04, 2026 |
| npm | @sbt_gitverse/analytics-client:99.0.1 | Tej zaum 04, 2026 |
| npm | @sbt_gitverse/analytics-client:99.0.4 | Tej zaum 04, 2026 |
| npm | @sbt_gitverse/analytics-client:99.0.5 | Tej zaum 04, 2026 |
| npm | @tochka-ui/lub hauv paus:99.0.2 | Tej zaum 04, 2026 |
| npm | @tochka-ui/lub hauv paus:99.0.3 | Tej zaum 04, 2026 |
| npm | @tochka-ui/lub hauv paus:99.0.4 | Tej zaum 04, 2026 |
| npm | kl-b2c-ui-kit:99.0.1 | Tej zaum 04, 2026 |
| npm | kl-b2c-ui-kit:99.0.2 | Tej zaum 04, 2026 |
| npm | kl-b2c-ui-kit:99.0.3 | Tej zaum 04, 2026 |
| npm | pi-exa-mcp:99.9.11 | Tej zaum 04, 2026 |
| npm | pi-exa-mcp:99.9.12 | Tej zaum 04, 2026 |
| npm | google-huab-zais-tus-tswj-config-poc:99.9.26 | Tej zaum 04, 2026 |
| npm | google-huab-zais-tus-tswj-config-poc:99.9.33 | Tej zaum 04, 2026 |
| npm | google-huab-zais-tus-tswj-config-poc:99.9.34 | Tej zaum 04, 2026 |
| npm | google-huab-zais-tus-tswj-config-poc:99.9.35 | Tej zaum 04, 2026 |
| npm | google-huab-zais-tus-tswj-config-poc:99.9.37 | Tej zaum 04, 2026 |
| npm | google-huab-zais-tus-tswj-config-poc:99.9.38 | Tej zaum 04, 2026 |
| npm | google-huab-zais-tus-tswj-config-poc:99.9.51 | Tej zaum 04, 2026 |
| npm | google-huab-zais-tus-tswj-config-poc:99.9.53 | Tej zaum 04, 2026 |
| npm | paypal-payouts-choj:99.9.9 | Tej zaum 04, 2026 |
| npm | paypal-payouts-choj:100.1.1 | Tej zaum 04, 2026 |
| npm | paypal-payouts-choj:100.1.4 | Tej zaum 04, 2026 |
| npm | paypal-payouts-choj:100.1.6 | Tej zaum 04, 2026 |
| npm | paypal-payouts-choj:100.1.9 | Tej zaum 04, 2026 |
| npm | paypal-payouts-choj:100.2.8 | Tej zaum 04, 2026 |
| npm | kev paub txog cov neeg ua haujlwm hauv microsoft: 99.2.2 | Tej zaum 05, 2026 |
| npm | carp-shield: 0.1.0 | Tej zaum 05, 2026 |
| npm | fanduel:100.5.0 | Tej zaum 05, 2026 |
| npm | exiouss:1.0.6 | Tej zaum 05, 2026 |
| npm | enterprise-auth-gateway-core:50.50.50 | Tej zaum 06, 2026 |
| npm | @saif777/codemirror5:7.66.4 | Tej zaum 06, 2026 |
| npm | @saif777/codemirror5:7.66.5 | Tej zaum 06, 2026 |
| npm | kev pabcuam chij-feature-chij:2.0.1 | Tej zaum 06, 2026 |
| npm | kev pabcuam chij-feature-chij:2.0.2 | Tej zaum 06, 2026 |
| npm | kev pabcuam chij-feature-chij:2.0.3 | Tej zaum 06, 2026 |
| npm | sort-btree:2.1.2 | Tej zaum 06, 2026 |
| npm | viem-core:1.0.0 | Tej zaum 06, 2026 |
| npm | viem-utils-core:1.0.0 | Tej zaum 06, 2026 |
| npm | hardhat-core-utils:1.0.0 | Tej zaum 06, 2026 |
| npm | veltrix:1.0.0 | Tej zaum 06, 2026 |
| npm | evm-utils:1.0.0 | Tej zaum 06, 2026 |
| npm | web3-utils-core:1.0.0 | Tej zaum 06, 2026 |
| npm | cov cuab yeej siv hauv kev tsim khoom: 1.0.0 | Tej zaum 06, 2026 |
| npm | carboniteapp: 99.9.0 | Tej zaum 07, 2026 |
| npm | carbonite-sab hauv: 99.9.0 | Tej zaum 07, 2026 |
| npm | nyiaj-badger-qhib-rpc:200.99.100 | Tej zaum 07, 2026 |
| npm | 24712-pl5006:0.0.1 | Tej zaum 07, 2026 |
| qhibvsx | eriklynd/json-cuab yeej:20.1.2 | Tej zaum 07, 2026 |
| npm | invixco:1.0.4 | Tej zaum 07, 2026 |
| npm | tus neeg sawv cev rau kev noj qab haus huv ntawm lub yeej-sys: 1.0.2 | Tej zaum 08, 2026 |
| npm | yeej-env-teeb tsa: 3.0.6 | Tej zaum 08, 2026 |
| npm | tus neeg sawv cev rau kev noj qab haus huv ntawm lub yeej-sys: 1.0.3 | Tej zaum 08, 2026 |
Ruaj Ntseg Koj Cov Khoom Siv Software Los Ntawm Qhov Tsis Zoo Thiab Cov Code Phem
Kev tawm tsam cov khoom siv software tsis yog kev hem thawj ntxiv lawm. Cov pob khoom phem, cov malware uas paub txog AI, kev tawm tsam tsis meej pem ntawm kev vam khom, cov neeg nyiag ntaub ntawv pov thawj, thiab cov cuab yeej tsim tawm lom zem tab tom tsom mus rau cov neeg siv khoom niaj hnub no. SDLCs, CI/CD pipelines, thiab cov chaw tsim kho uas muaj AI pab txhawb.
Nrog Xygeni txoj kev tshawb nrhiav Malware thaum ntxov thiab software supply chain security platform, cov koom haum tuaj yeem txheeb xyuas thiab thaiv cov kev vam khom phem ua ntej lawv mus txog cov chaw ua haujlwm tsim khoom, tsim cov txheej txheem, lossis kev tsim khoom pipelines.
Xygeni pheej saib xyuas cov ecosystem xws li npm, PyPI, VS Code, thiab OpenVSX kom pom cov pob khoom phem, cov qauv tshaj tawm tsis ntseeg, kev ntaus ntawv tsis raug, kev siv tsis raug ntawm lub npe, kev nyiag cov ntaub ntawv pov thawj, thiab kev hem thawj ntawm AI hauv lub sijhawm tiag tiag. Cov kev tshawb pom tau muab qhov tseem ceeb raws li kev siv tsis raug, kev ncav cuag tau, thiab kev cuam tshuam kev ua haujlwm kom cov pab pawg tuaj yeem tsom mus rau cov kev pheej hmoo uas tseem ceeb tiag tiag.
Txij li cov pob khoom npm phem thiab kev vam khom OSS uas raug cuam tshuam mus rau kev pheej hmoo ntawm AI-generated code thiab cov cuab yeej tsim tawm lom, Xygeni pab cov pab pawg kev ruaj ntseg thiab cov pab pawg engineering tswj kev pom kev, kev ntseeg siab, thiab kev tswj hwm thoob plaws cov khoom siv software niaj hnub no.
Txhawm rau tshawb nrhiav cov phiaj xwm malware tshiab thiab cov pob khoom phem uas tau lees paub los ntawm Xygeni Security Team, mus saib tag nrho Cov Lus Qhia Txog Cov Code Uas Ua Rau Neeg Phem.
Nyob ruaj ntseg. Nyob ceev. Tswj hwm nrog Xygeni.
