Mmadụ Bịa ka Mbipụta June nke Xygeni Malicious Code DigestN'ọnwa a, ndị otu nyocha nchekwa anyị kwadoro ihe karịrị Ngwungwu ọjọọ 645 n'ofe npm, PyPI, na (maka oge mbụ) ahịa ndọtị VSCode.
A kọwara June site na usoro atọ na-agbakọta ọnụ: mkpọsa na-adịgide adịgide nke ụdị idei mmiri nke e mere iji karịa ndepụta mkpọchi, mmụba dị nkọ na mwakpo na-elekwasị anya na ngwaọrụ AI na usoro mmepe agentic, na mwakpo mgbagwoju anya dabere na nhazi megide oghere aha monorepo dị n'ime.
N'ime mkpọsa ndị a ma ama nke e dekọrọ n'ọnwa a:
- mmetụta uche NPM juputara na ihe karịrị ụdị 70 n'ofe oke 2.5.x, mkpọsa ịgbapụ na-aga n'ihu na-ebipụtaghachi mgbe niile iji nọgide na-ebuso nbudata.
- A mkpọsa okwu mkpụmkpụ Solana nke nwere ebili mmiri abụọ (Juun 7–8) bipụtara ngwugwu 15 na-eme ka à ga-asị na ọ bụ aha mmadụ
@solana-labsNgwa maka gburugburu ebe obibi, na-elekwasị anya na ndị mmepe Web3 na DeFi ozugbo. - houzidawang806 ihe karịrị ụdị 25 n'otu ụbọchị (June 13), ndị sonyere na ya usoro nha-pipeline-d8k2 ebigharịrị n'ofe mbipụta 21 n'etiti Juun 15 ruo 18.
- The Mgbagwoju anya CryptoDAO mkpọsa (June 17) bipụtara ngwugwu iri na otu na ụdị 99.99.99, nke ọ bụla nwere otu nhazi ụgwọ ọrụ mgbe nrụnye gasịrị. CI/CD ihe nrịbama, nzere igwe ojii, na ihe nzuzo nke obere akpa ego crypto.
- Izu nke June 20–26 wetara ebumnuche ngwaọrụ AI kachasị elu nke ọnwa ahụ: ndị enyemaka ollama (Nsụgharị 20), ndị enyemaka openai-agent (Nsụgharị 23), monoclaude, ndị enyemaka AI-sdk, na @langgraphjs/ngwaọrụ, ihe niile akwadoro n'ime otu izu, na-elekwasị anya kpọmkwem na njikọta Ollama, ndị nnọchi anya OpenAI SDK, LangGraph, na Claude API.
- Ekwenyere mmadụ abụọ ndọtị VSCode ọjọọ pụtara n'ọnwa a, na-egosi na ndị na-awakpo na-agbasa karịa ndebanye aha ngwugwu gaa na gburugburu ebe mmepe n'onwe ya.
Usoro nke June: mwakpo na-aga n'ihu na ndọtị IDE, ngwaọrụ ndị na-ahụ maka AI, na usoro ọrụ ndị na-ahụ maka ndị ọrụ ebe ngwugwu ọjọọ arụnyere n'onwe ya enweghị onye nyocha mmadụ n'etiti ọrịa na ogbugbu.
Mmelite a kwa ọnwa bụ akụkụ nke atụmatụ Xygeni na-aga n'ihu na-eme nchọpụta ihe iyi egwu malware na usoro ọkọnọ. Maka nkọwa zuru oke gbasara ngwugwu ọjọọ ọ bụla akwadoro n'ọnwa a, lelee nyocha zuru oke nke June Malicious Code Digest na nyocha metụtara ya site na Ndị otu nchekwa Xygeni.
Izu nke 4: Achọpụtara ihe karịrị ngwugwu 201
| Ngwurugwu | ngwugwu | Ụbọchị |
|---|---|---|
| June 20, 2026 | ||
| npm | panraụta: 5.0.2 + Ụdị 30 n'ofe 5.x–6.x ruo Juun 22 - mkpọsa kachasị nke izu a | Jun 20, 2026 |
| npm | ihe ngosi mmalite: 1.0.5 + Ụdị 4 - n'ihu site na izu gara aga, ka na-arụ ọrụ | Jun 20, 2026 |
| npm | monoclaude: 1.0.1 + Ụdị abụọ — Ịme ihe n'ụdị ngwaọrụ Claude API | Jun 20, 2026 |
| vscode | nhazi-ụzọ-ọrụ-maka-smalltalk:1.206.0 + 1 ụdị — ndọtị VSCode ọjọọ na-elekwasị anya na mmepe ndị nnọchi anya | Jun 20, 2026 |
| npm | simplisafe-gatsby:1.0.1 Nnwale aha oghere nke ikpo okwu smart n'ụlọ | Jun 20, 2026 |
| June 21, 2026 | ||
| npm | Atlasora-kesara: 1.0.0 + Ngwugwu 6 — mgbagwoju anya nke ịdabere na monorepo ahaziri: atlasora-api, -client, -sdk, -types, -utils, -config | Jun 21, 2026 |
| npm | post apintergration:4.0.2 + Ụdị 6 - mkpọsa mkpoputa okwu e ji aka kpaa maka ijikọta ngwaọrụ | Jun 21, 2026 |
| npm | ngwa llm-traces:1.0.1 Ngwaọrụ nlele LLM ezubere iche maka ojiji | Jun 21, 2026 |
| pypi | d0rk3r-telemetry:1.0.0 Ngwugwu telemetry gbara ọchịchịrị na PyPI | Jun 21, 2026 |
| June 22, 2026 | ||
| pypi | tm-ai:2.91.75 + Ụdị 7 — mkpọsa idei mmiri nke ụdị PyPI na-aga n'ihu | Jun 22, 2026 |
| pypi | arịrịọ-cache-py:1.0.4 + ụdị isii — idei mmiri nke ụdị PyPI | Jun 22, 2026 |
| pypi | corvinos:0.17.0 + Ụdị isii — Mgbasa ozi ndebanye aha PyPI buru ibu | Jun 22, 2026 |
| June 23, 2026 | ||
| npm | onye na-enyere aka web3-token:1.1.1 + ụdị abụọ — Nlele ọrụ token Web3 | Jun 23, 2026 |
| npm | otu obe:1.0.1 + 1 ụdị — otu mkpụrụ aha mono-* yana monoclaude na monotacos | Jun 23, 2026 |
| June 24, 2026 | ||
| npm | ndị na-enyere aka ollama:0.1.0 + Ụdị 19 - mkpọsa ngwaọrụ AI kachasị ukwuu nke ọnwa, na-elekwasị anya na oge ọrụ AI mpaghara Ollama | Jun 24, 2026 |
| npm | ndị enyemaka openai-agent:0.1.1 + Ụdị 22 - mkpọsa a haziri ahazi na-elekwasị anya na sistemụ SDK nke ndị nnọchi anya OpenAI | Jun 24, 2026 |
| June 25, 2026 | ||
| npm | ndị na-enyere aka na-anaghị achọ enyemaka:1.4.3 Ngwaọrụ AI SDK ezubere iche yana @langgraphjs/toolkit:1.2.11 | Jun 25, 2026 |
| npm | onye na-etinye ihe ndebanye aha: 99.99.99-poc3 + hs-locale-management — HubSpot dị n'ime nsogbu ịdabere na aha oghere, mgbakwunye poc na-akwado mkpọsa nyocha na-arụ ọrụ | Jun 25, 2026 |
| June 26, 2026 | ||
| npm | ngwa eriri dị mfe: 1.0.1 + Ụdị 8 gụnyere ụdị dị iche iche dị mfe-string-kit232 - ndebanye aha buru ibu n'okpuru aha ọrụ izugbe | Jun 26, 2026 |
| npm | ngwugwu dị ize ndụ-ọjọọ:1.0.0 + Ụdị 5 - ngwugwu a kpọrọ aha nke ọma dị ka ihe ọjọọ, ihe a kwadoro, ihe nwere ike ịbụ ule ma ọ bụ mkpọsa mkpasu iwe | Jun 26, 2026 |
| npm | @vpms/usoro nhazi:1.1.2 + Ụdị abụọ — imepụta aha oghere sistemụ nhazi | Jun 26, 2026 |
Izu nke 3: Achọpụtara ihe karịrị ngwugwu 200
| Ngwurugwu | ngwugwu | Ụbọchị |
|---|---|---|
| June 13, 2026 | ||
| npm | houzidawang806:1.0.0 + Ụdị 25 n'ofe 1.0.x–1.2.x gụnyere ụmụnne houzidawang807 na houzidawang808 - mkpọsa kachasị n'izu a | Jun 13, 2026 |
| npm | enyi na enyi-ekele-ngosi:1.0.2 + Ụdị 4 - mkpọsa na-aga n'ihu na-apụtaghachi n'ime ọtụtụ ụbọchị | Jun 13, 2026 |
| npm | tsc-ai:1.2.0 tsc-* cluster: tsc-ai, tsc-mesh, tsc-lotl — Iṅomi aha oghere ngwaọrụ CI | Jun 13, 2026 |
| pypi | neuralbridge-sdk:4.5.4 + Ụdị isii n'ofe 4.5.x–5.1.x — mkpọsa PyPI nke ọtụtụ ụbọchị na-adịgide adịgide | Jun 13, 2026 |
| June 15, 2026 | ||
| npm | ihe nrịbama-ọnụahịa-cron:999.0.0 + Ngwugwu 6 — Njikọ mgbagwoju anya nke DeFi na-elekwasị anya na ngwaọrụ cron dị n'ime na vault | Jun 15, 2026 |
| June 16, 2026 | ||
| npm | bodega-sdk:9.9.9 + ngwugwu 8 — DeFi mbinye ego na Cardano system cluster: flow-binding, surf-binding, janus-*, flowcardano, flowdefi | Jun 16, 2026 |
| npm | ihe omume-metrics-q3x7:1.0.0 + Ụdị 8 - ngwugwu hex-suffix zuru oke na-edebanye aha maka nlekota ọtụtụ aha | Jun 16, 2026 |
| npm | nic-datagov:1.0.0 + Ngwugwu atọ — nhazi aha nke ikpo okwu data gọọmentị: ogd-analytics, ogd-platform, dms-backend | Jun 16, 2026 |
| June 17, 2026 | ||
| npm | nkwekọrịta cryptodao:99.99.99 + Ngwugwu iri — mgbagwoju anya dabere na CryptoDAO: isi, sdk, bot, nhazi, utils, deploy, signer, backend, types | Jun 17, 2026 |
| pypi | teambot-ai:1.48.0 Ngwaọrụ ndị na-ahụ maka AI ezubere iche na PyPI | Jun 17, 2026 |
| June 18, 2026 | ||
| npm | usoro nha-pipeline-d8k2:1.0.0 + ụdị 20 n'ime Juun 18 - mkpọsa ịgbapụ otu ụbọchị nọgidere na-aga n'ihu, na-ebipụtaghachi ya mgbe niile ruo mgbe ọ gafere ndepụta mkpọchi | Jun 18, 2026 |
| npm | Nyocha naanị: 0.4.5 + Ụdị 6 — mkpọsa idei mmiri nke ụdị ahụ | Jun 18, 2026 |
| npm | agba-utils-dee0:1.0.0 + Ngwugwu hex-suffix ise zuru ụwa ọnụ: data-utils, string-tools, type-check, fmt-helpers, metrics-probe — scripted bulk registration | Jun 18, 2026 |
| npm | @azure-lab-services/ml-ts:99.0.0 Nnwale aha Azure ML | Jun 18, 2026 |
| June 19, 2026 | ||
| npm | ihe ngosi mmalite: 1.0.2 + trimprompt-hub - ngwa ọrụ injinia ngwa ngwa ezubere iche | Jun 19, 2026 |
| npm | iko claude: 0.8.6 Nnwale ngwa Claude API | Jun 19, 2026 |
| pypi | onye nnọchi anya aiaddin:0.1.0 Ngwaọrụ ndị na-ahụ maka AI ezubere iche na PyPI | Jun 19, 2026 |
| npm | web3-crypto-address-utils:0.1.0 Nlele ọrụ Web3 | Jun 19, 2026 |
Izu nke 2: Achọpụtara ihe karịrị ngwugwu 135
| Ngwurugwu | ngwugwu | Ụbọchị |
|---|---|---|
| June 7, 2026 | ||
| npm | @solana-labs/web3.js:1.0.0 + Ụdị 5 — Mgbasa ozi typosquat nke gburugburu ebe obibi Solana, ebili mmiri mbụ | Jun 7, 2026 |
| npm | @jisan901/teamfocus:1.0.0 + Ụdị abụọ | Jun 7, 2026 |
| npm | @sflyinc-knapsack/shutterfly-react:999.0.0 Mgbagwo nke ịdabere na mmadụ, ụdị ebuliri elu | Jun 7, 2026 |
| June 8, 2026 | ||
| npm | @solana-labs/web3.js:1.98.102 + Ụdị 9 — Mgbasa ozi typosquat nke Solana gburugburu ebe obibi, ebili mmiri nke abụọ | Jun 8, 2026 |
| pypi | heliksagentai:0.1.3 Ngwaọrụ ndị na-ahụ maka AI ezubere iche na PyPI | Jun 8, 2026 |
| June 9, 2026 | ||
| npm | @nstrlabs/sdk:99.0.0 + Ngwugwu 7 — mgbagwoju anya dabere na oghere aha monorepo dị n'ime | Jun 9, 2026 |
| npm | @klapp-login-ikpo okwu/native-sdk:99.0.0 + Ngwugwu 9 - nṅomi ikpo okwu nkwenye n'ọtụtụ aha klapp | Jun 9, 2026 |
| npm | blockchain-helper-0:1.0.0 + ngwugwu 7 — klaasị ọrụ crypto/DeFi na-elekwasị anya na ndị mmepe Web3 | Jun 9, 2026 |
| npm | @card-pci-data/ụlọ ahịa:99.0.0 Ezubere maka aha data kaadị ịkwụ ụgwọ ezubere iche | Jun 9, 2026 |
| June 10, 2026 | ||
| npm | sistemụ nhazi morningstar:99.0.0 + Ụdị abụọ — mmetọ sistemụ nhazi ego | Jun 10, 2026 |
| June 11, 2026 | ||
| npm | nhazi:1.0.1 + mbipụta ise e bipụtara n'otu ụbọchị ahụ | Jun 11, 2026 |
| npm | @coze-common/mpaghara nkata:99.1.1 Iṅomi aha oghere n'elu ikpo okwu nkata AI | Jun 11, 2026 |
| pypi | telegramlite: 1.0.0 + 1 ụdị — nyiwe ozi na PyPI | Jun 11, 2026 |
| June 12, 2026 | ||
| npm | ecto-corsair-whisper-6f3b9:1.0.18 + Ụdị ecto-* asaa — otu aha gbara ọchịchịrị | Jun 12, 2026 |
| npm | internallib_v984:1.0.3 + internallib_v557 cluster — ụdị 13 nke ndị aghụghọ ọbá akwụkwọ dị n'ime | Jun 12, 2026 |
| npm | njem weebụ:999.0.0 Mgbagwo nke ịdabere na mmadụ, ụdị ebuliri elu | Jun 12, 2026 |
| pypi | cdjeez:0.32.0 | Jun 12, 2026 |
Izu nke 1: Achọpụtara ihe karịrị ngwugwu 118
| Ngwurugwu | ngwugwu | Ụbọchị |
|---|---|---|
| Nwere ike 30, 2026 | ||
| npm | @cloudplatform-single-spa/nchịkwa:99.99.100 Mgbagwo nke ịdabere na mmadụ, ụdị ebuliri elu | Nwere ike 30, 2026 |
| vscode | onye njikwa xampp: 5.1.3 Mgbakwunye VSCode - n'ịme ka onye nrụpụta rụọ ọrụ | Nwere ike 30, 2026 |
| June 1, 2026 | ||
| npm | @tse-dijital/isi:99.0.0 Mgbagha nke ịdabere — @telenor-se na @ownit tinyekwara aka | Jun 1, 2026 |
| npm | ebe nchekwa cms:1.3.4 + Ụdị abụọ, otu aha oghere CMS | Jun 1, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.69 + Ụdị isii, ọnụọgụ ụdị ebuliri elu na-elekwasị anya na nzere AWS | Jun 1, 2026 |
| npm | akwụkwọ ndị ọrịa:75.0.0 Ebumnuche aha ebe nlekọta ahụike | Jun 1, 2026 |
| npm | @emcd-vue/auth:6.4.9 Ndogharị aha oghere mgbanwe ego Crypto | Jun 1, 2026 |
| pypi | simtooreal-cli:0.3.0 | Jun 1, 2026 |
| June 2, 2026 | ||
| npm | mmetụta uche: 2.5.8 + Ụdị 70 n'ofe oke 2.5.x, Juun 2–5 - mkpọsa kachasị nke oge ahụ | Jun 2, 2026 |
| npm | @langgraphjs/ngwaọrụ:1.2.10 Ngwaọrụ LangGraph ezubere iche | Jun 2, 2026 |
| June 4, 2026 | ||
| npm | @sentry-browser-sdk/profiling-node:1.0.1 + Ụdị abụọ, Nnwale aha Sentry | Jun 4, 2026 |
| npm | internallib_v346:1.0.3 + Ụdị abụọ, onye aghụghọ ọbá akwụkwọ dị n'ime | Jun 4, 2026 |
| npm | ndị na-enyere aka na-anaghị achọ enyemaka:0.2.1 + Ụdị 7, na-elekwasị anya na ngwaọrụ AI SDK | Jun 4, 2026 |
Kwụsị Koodu Ọjọọ Tupu Ọ Rute Gị Pipeline
Ihe iyi egwu nke usoro nnyefe ngwanrọ agafeela echiche. Mwakpo mgbagwoju anya nke ịdabere na onye ọzọ, ndị na-ezu ohi akwụkwọ ikike, malware nke lekwasịrị anya na AI, na ngwaọrụ ndị nrụpụta na-egbu egbu na-emetụta ndị otu n'ezie. SDLCkwa izu.
Xygeni's nchọpụta malware na ikpo okwu nchekwa agbụ ọkọnọ Ọ na-enye òtù dị iche iche ohere ịhụ ihe ndị na-emebi emebi tupu ha arụ ọrụ na igwe mmepụta ihe, tinye sistemụ nrụpụta, ma ọ bụ iru mmepụta. Mkpuchi ahụ na-agụnye npm, PyPI, VSCode, na ihe ndị ọzọ, nlekota maka ụkpụrụ mbipụta a na-enyo enyo, mmegbu aha oghere, ide ihe ederede, na usoro mwakpo AI-n'ezie ka ha na-apụta.
A na-ebute ụzọ na nchọpụta ọ bụla site na ike iji ya, ohere iru ya, na mmetụta azụmaahịa, yabụ ndị otu gị na-elekwasị anya n'ihe chọrọ ndozi, ọ bụghị mkpọtụ.
Ma ọ bụ ngwugwu mepere emepe nke na-emebi emebi, ngwaọrụ onye nrụpụta emebiela, ma ọ bụ ihe egwu koodu nke AI mepụtara, Xygeni na-eme ka ndị otu nchekwa na injinia nwee otu nzọụkwụ tupu ọnọdụ iyi egwu nke usoro ọkọnọ.
Chọpụta ngwugwu na mkpọsa ọjọọ ọ bụla nke ndị otu nchekwa Xygeni kwadoro na Nchịkọta Koodu Ọjọọ.
Nọgide na-enwe nchebe. Nọgide na-eme ngwa ngwa. Nọgide na-achịkwa Xygeni.
