Npm malware hnub no txuas ntxiv mus zuj zus, nrog cov neeg tawm tsam tshaj tawm cov lej phem, cov pob khoom npm phem, Thiab Cov pob khoom phem PyPI tsim los tsom mus rau cov txheej txheem kev txhim kho, CI/CD pipelines, thiab cov ecosystem qhib-qhov chaw. Lub Cov Lus Qhia Txog Cov Code Uas Ua Rau Neeg Phem yog daim ntawv tshawb fawb uas Xygeni tab tom ua uas taug qab thiab txheeb xyuas cov pob khoom phem tiag tiag thoob plaws npm, PyPI, VS Code, Thiab OpenVSX, suav nrog cov backdoors uas tau lees paub lawm, cov neeg nyiag ntaub ntawv, cov payloads uas rho tawm cov ntaub ntawv pov thawj, thiab cov phiaj xwm malware ntau hom uas tsis siv neeg.
Peb pab neeg tshawb fawb hloov kho nplooj ntawv no tsis tu ncua nrog cov kev tshawb pom tau lees paub, cov cim qhia txog kev cuam tshuam (IOCs), cov qauv kev coj cwj pwm, Thiab kev tsom xamYog li ntawd, cov neeg tsim khoom, Cov pab pawg AppSec, thiab cov kws ua haujlwm kev ruaj ntseg tuaj yeem nyob ua ntej npm malware hnub no thiab cov haujlwm phem uas tshwm sim los cuam tshuam rau cov khoom siv software niaj hnub no.
NPM Malware Niaj Hnub No: Kev Txheeb Xyuas Txhua Lub Limtiam 24–29 Lub Plaub Hlis 2026
Cov kws tshawb nrhiav tau lees paub 97 pob khoom phem thoob plaws cov ntaub ntawv sau npe rau pej xeem thaum lub sijhawm no.
Cov kev soj ntsuam ntawm cov ntaub ntawv
- Cov pob khoom uas tau lees paub feem ntau tau luam tawm hauv npm
- Cov xwm txheej ntxiv uas raug cuam tshuam PyPI, OpenVSX, Thiab Composer
- Kev tshaj tawm phem ntau zaus thoob plaws tib lub pob khoom thiab cov npe cuam tshuam
- Cov qauv siab lossis tsis zoo li qub xws li 99.x, 99.9.x, Thiab 1.0.x
- Kev siv zog ntawm kev them nyiaj thiab kev them nyiaj, enterprise-style, lub web app sab hauv, analytics, Lub hauv paus UI, cov cuab yeej tsim tawm, raws li huab, Thiab cuam tshuam nrog cov khoom cov qauv npe
- Ntau qhov sib koom ua ke ntawm cov qauv tsim los zoo li cov kev hloov kho tshiab ntawm pob khoom raug cai
Daim Ntawv Qhia Txog Malware Txhua Hli: Pom Zoo Cov Pob Khoom NPM Phem hauv Lub Plaub Hlis 2026
Txais tos rau tsab ntawv tshiab kawg ntawm Xygeni Malicious Code Digest (Tsab Ntawv Txhua Hli). Nyob rau hauv Plaub Hlis Ntuj 2026, peb pab neeg tshawb fawb tau lees paub tseeb tias ntau tshaj 250 pob khoom phem, feem ntau hla npm, nrog rau cov rooj plaub ntxiv uas cuam tshuam rau PyPI, VS Code, OpenVSX, thiab Composer.
Lub Plaub Hlis tsis yog hais txog qhov ntim xwb. cov nthwv dej luam tawm uas tsav los ntawm kev siv tshuab, kev sib tw nce nqi ntawm cov qauv kev ua phem, kev sib sau ua ke ntawm tsev neeg pob khoom, Thiab kev ua txuj ua li cov cuab yeej sab hauv, peb tau pom qee qhov qauv tseem ceeb tshaj plaws ntawm lub hlis no hauv kev tshaj tawm phem sib koom ua ke thoob plaws:
Cov cuab yeej sab hauv cuav, cov pob khoom AI-themed, cov modules them nyiaj thiab checkout, cov neeg siv khoom analytics, cov khoom frontend, cov khoom siv tsim tawm, Kubernetes thiab cov cuab yeej huab, VS Code thiab OpenVSX extensions, thiab cov npe pob khoom zoo li lub npe ntseeg siab uas tsim los sib xyaw rau hauv kev xa khoom software tiag tiag pipelines.
Cov no tsis yog cov xwm txheej yooj yim uas muaj kev ntaus ntawv tsis raug. Thoob plaws qhov dav dua Plaub Hlis Ntuj cov ntaub ntawv, peb tau pom cov qauv kev siv tsis raug ntawm daim ntawv pov thawj, kev tswj hwm cov khoom xa tuaj, rov siv dua lub npe chaw, Thiab kev tshaj tawm phem sib koom tes tsim los sib xyaw rau hauv cov chaw tsim khoom tiag tiag thiab kev xa khoom software pipelines.
Thoob plaws cov ntaub ntawv dav dav, peb txuas ntxiv saib xyuas kev tshaj tawm ntau hom ntawv sau ua ntawv, cov qauv versioning inflated, kev them nyiaj- thiab enterprise- kev sau npe themed, Cov npe pob khoom AI- thiab cov neeg sawv cev, SDK thiab kev ua piv txwv ntawm cov khoom siv pem hauv ntej, kev ua piv txwv ntawm cov cuab yeej sab hauvthiab cov tswv yim classic xws li kev tsis meej pem ntawm kev vam khom thiab kev rho tawm cov ntaub ntawv.
Daim ntawv qhia no yog ib feem ntawm peb txoj kev ua haujlwm tas mus li Cov Lus Qhia Txog Cov Code Uas Ua Rau Neeg Phem, qhov twg peb lees paub qhov kev hem thawj tshiab thiab muab kev txawj ntse los pab Cov pab pawg DevSecOps nyob ua ntej kev pheej hmoo ntawm cov khoom siv software.
| ecosystem | pob | Hnub |
|---|---|---|
| npm | pa-cim: 99.1.10 | Apr 27, 2026 |
| pypi | moonbit-qhov chaw-sib xws: 0.2.3 | Apr 27, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.13 | Apr 27, 2026 |
| npm | @sbt_gitverse/analytics-client:99.0.1 | Apr 27, 2026 |
| npm | @frengki0707/google-cloud-clone:1.33.1 | Apr 27, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.14 | Apr 27, 2026 |
| npm | @tochka-ui/lub hauv paus:99.0.2 | Apr 27, 2026 |
| qhibvsx | arcane-spark/ubel:0.1.0 | Apr 28, 2026 |
| npm | @2011-08-19/n:99.9.9 | Apr 28, 2026 |
| npm | @frengki0707/google-cloud-clone:1.38.0 | Apr 27, 2026 |
Peb Yuav Ua Li Cas Nrhiav Tau Cov Code Phem Hauv Npm Malware Thiab PyPI Malware
Xygeni siv ntau txheej txheem los tiv thaiv cov code phem ua ntej nws kis mus. Ua ntej tshaj plaws, kev tshuaj xyuas cov code static nrhiav pom cov qauv obfuscation, cov payloads zais cia, thiab kev siv tsis raug ntawm cov ntawv sau. Tsis tas li ntawd, kev tshuaj xyuas behavioral sandboxing txhim kho hooks, cov lus txib runtime, thiab cov tswv yim persistence. Ntxiv mus, kev kawm tshuab nrhiav pom zero-day npm malware thiab pypi malware variants uas cov neeg kos npe scanners tsis pom. Thaum kawg, Lub Tshuab Ceeb Toom Thaum Ntxov saib xyuas cov chaw khaws cia rau pej xeem hauv lub sijhawm tiag tiag, lees paub cov kev tshawb pom, thiab ceeb toom rau DevOps pab pawg tam sim ntawd.
Yog li ntawd, qhov kev sib xyaw ua ke no ua kom cov neeg tsim khoom tau txais kev txawj ntse sai thiab ua tau ncaj qha rau hauv CI/CD hauj lwm.
Vim li cas cov neeg tsim khoom yuav tsum mob siab txog cov pob khoom npm phem
Cov kev hem thawj niaj hnub no tsis tshua tos lub sijhawm khiav. Piv txwv li, cov pob khoom npm phem feem ntau ua haujlwm thaum lub sijhawm teeb tsa, thaum cov pob khoom phem pypi zais cov cim qhia kev tawm tsam lossis qhov rooj tom qab. Cov neeg tawm tsam:
- Tig cov chaw khaws cia GitHub ntiag tug rau pej xeem kom rov ua dua lawv.
- Tshem tawm cov ntaub ntawv pov thawj thiab cov lus zais siv cov payloads encoded.
- Siv cov JavaScript loaders uas tsis meej pem los xa tawm ransomware lossis botnets.
Qhov tseeb, cov pob khoom qhib uas muaj kev phem tau nce 156% hauv ib xyoos. Yog li ntawd, cov pab pawg uas tsuas yog vam khom cov khoom noj qeeb lossis cov tshuab luam theej yooj yim poob qis.
Daim Ntawv Tshaj Tawm Malware no taug qab dab tsi hauv npm thiab PyPI
Cov ntawv qhia no yog lub hauv paus rau:
- Cov pob khoom npm phem tau lees paub
- Cov pob khoom phem pypi uas tau lees paub lawm
- Kev kuaj pom cov lej phem raws li tus cwj pwm
- Cov xwm txheej uas tau lees paub los ntawm Registry
- Cov ntsiab lus luv luv ntawm daim ntawv qhia txog malware txhua lub lim tiam thiab txhua hli
- Keeb kwm changelog ntawm txhua qhov kev tshawb pom ntawm npm malware thiab pypi malware
Hauv lwm lo lus, nws muab ib qho taw tes rau kev siv. Pab neeg tshawb fawb ntawm Xygeni hloov kho nplooj ntawv no txhua lub lim tiam nrog cov kev sib txuas rau kev tshuaj xyuas kev txawj ntse tag nrho thiab GitHub IOCs.
Yuav Ua Li Cas Tiv Thaiv Cov Pob Khoom NPM Uas Muaj Kev Phem Thiab PyPI Malware
Vim yog qhov kev pheej hmoo loj hlob no, cov koom haum xav tau ntau dua li kev kuaj xyuas kev vam khom yooj yim. Kev tiv thaiv zoo tiv thaiv cov pob khoom npm phem thiab cov pob khoom pypi phem xav tau ob qho kev tswj hwm tiv thaiv thiab kev ua haujlwm ntawm lub sijhawm khiav:
Yuam kom Lockfile-Tsuas yog Installs Tawm Tsam Cov Pob Khoom Malicious npm
siv npm ci or pip install --require-hashes in CI/CD.
Qhov no ua kom ntseeg tau tias tsob ntoo kev vam khom tseeb uas tau txhais hauv cov ntaub ntawv xauv raug siv. Yog li ntawd, cov neeg tawm tsam tsis tuaj yeem nkag mus rau hauv cov qauv hloov kho lossis ntaus ntawv ntawm cov pob khoom npm phem.
Ua Ntej Nruab Scan rau npm Malware thiab PyPI Malware
Txuas Xygeni's Early Warning Engine los luam theej duab npm malware thiab pypi malware ua ntej cov pob khoom mus txog koj qhov chaw ib puag ncig.
Tsis tas li ntawd, nrhiav pom cov neeg tsis ntseeg postinstall cov ntawv sau, cov loaders uas tsis meej, lossis C2 URLs uas tau hardcoded.
Guardrails thaiv cov Builds nrog Malicious Code
teem guardrails kom ua tsis tiav cov kev tsim kho tau yog tias pom tseeb tias cov pob khoom npm phem lossis pypi cov pob khoom phem.
Piv txwv li, kev tawg ua rau ntawm cov pob khoom nrog cov neeg saib xyuas tsis tau tshaj tawm, cov qauv tsis meej, lossis IOC sib phim. Yog li ntawd, cov lej phem yeej tsis hla dhau qhov tsis pom.
Tsim thiab Txheeb Xyuas SBOMTawm tsam cov pob khoom npm phem thiab PyPI Malware
tsim SBOMs (CycloneDX, SPDX) rau txhua qhov kev tsim kho.
Tom qab ntawd, piv rau cov pob khoom npm phem thiab pypi malware pub kom taug qab ob qho tib si ncaj qha thiab hloov pauv.
Kev Tiv Thaiv Daim Ntawv Pov Thawj thiab Token los ntawm npm Malware thiab PyPI Malware
Muaj ntau lub pob npm phem sim nyeem .npmrc, .pypirc, lossis cov hloov pauv ib puag ncig.
Yog li ntawd, khiav cov builds hauv cov thawv khov kho uas muaj qhov zais cia tsawg kawg nkaus. Tsis tas li ntawd, siv cov secrets managers es tsis txhob siv cov environment variables los thaiv kev siv cov code phem.
Saib Xyuas Kev Hloov Pauv ntawm Registry thiab Maintainer hauv Malicious npm Packages
Cov neeg tawm tsam feem ntau nyiag cov haujlwm uas tau tso tseg lawm.
Tshwj xeeb, saib xyuas kev hloov pauv sai sai ntawm tus neeg saib xyuas, kev dhia tsis zoo li qub, lossis kev tshaj tawm ntau dhau hauv npm malware thiab pypi malicious packages.
Kev Kawm Txog Kev Tshawb Nrhiav Cov Code Uas Ua Rau Muaj Kev Phom Sij Hauv NPM Thiab PyPI
Qhia cov pab pawg kom pom cov cim qhia liab xws li:
- Cov npe pob khoom uas muaj cov ntawv sau tsis raug (
reqeustes tsis txhobrequest). - txawv txawv
installorpreparentawv sau. - Cov pob khoom tsim tshiab nrog cov lej version siab heev.
Qhov tseem ceeb tshaj plaws, qhov kev paub no pab nrhiav pom cov code phem thaum ntxov.
Kev Tshawb Nrhiav Qhov Tsis Zoo ntawm Lub Sijhawm Khiav rau Cov Pob Khoom NPM phem thiab PyPI Malware
Txawm tias malware hla dhau qhov kev kuaj xyuas static, kev kuaj pom lub sijhawm khiav hauv CI/CD tuaj yeem ntes tau:
- Kev sib txuas network tsis tau xav txog.
- Kev hloov kho cov ntaub ntawv system sab nraum cov directory xav tau.
- Kev sim ua kom ruaj khov ntawm txhua txoj haujlwm.
Thaum kawg, qhov no ua kom ntseeg tau tias npm malware thiab pypi malware kev hem thawj raug nres txawm tias tom qab kev teeb tsa.
Los ntawm kev sib koom ua ke cov kev tswj hwm no, cov pab pawg tiv thaiv cov pob khoom npm phem thiab cov pob khoom pypi phem kom tsis txhob mus txog qhov ntau lawm pipelines.
Sim Xygeni cov cuab yeej nrhiav Malware
Xygeni xa khoom:
- Kev tshawb pom cov code phem hauv lub sijhawm tiag tiag, suav nrog backdoors, spyware, thiab ransomware.
- Sib piv rau cov scanners yooj yim, kev tshuaj xyuas thoob plaws npm, PyPI, Maven, NuGet, RubyGems, thiab ntau ntxiv.
- Kev thaiv tsis siv neeg thaum daim ntawv qhia txog malware pom qhov txaus ntshai.
- Kev nkag siab txog kev siv tsis raug, kev kuaj xyuas lub koob npe nrov ntawm tus neeg saib xyuas, thiab kev kuaj pom qhov tsis zoo.
Nyob Yuav Qhia
Peb pab neeg hloov kho nplooj ntawv no txhua lub lim tiam. Txhawm rau txais cov ntawv ceeb toom thiab cov ntawv qhia ntxaws ntxaws:
- Sau npe yuav rau peb Cov ntawv xov xwm
- Ua raws li @XygeniSecurity ntawm Linkedin
- Bookmark nplooj ntawv no kom taug qab qhov tseeb npm malware thiab pypi malware hem
