Nchịkọta nke Koodu Ọjọọ kwa ọnwa: Mee

Nnọọ na mbipụta nke Xygeni Malicious Code Digest nke Mee. N'ọnwa a, ndị otu nyocha nchekwa anyị gara n'ihu na-enyocha ihe iyi egwu nke usoro inye ngwanrọ n'ofe ndebanye aha ngwugwu ọha, ngwaọrụ ndị nrụpụta, usoro ọrụ enyere aka na AI, na nke ọgbara ọhụrụ. CI/CD gburugburu ebe obibi. N'ime ọnwa Mee niile, Xygeni chọpụtara ma kwado ọtụtụ narị ngwugwu ọjọọ ndị na-elekwasị anya na gburugburu ebe obibi npm, PyPI, VS Code, na OpenVSX.

Ma ọ bụghị naanị na Mee bụ maka olu. Ọ bụkwa ọnwa ebe ndị mwakpo na-agbanwe azụmaahịa ha ka ọ dabara na gburugburu mmepe AI, echiche ntụkwasị obi ndị mmepe, na akpaaka. pipelines.

N'ime nnyocha ndị kacha pụta ìhè nke ndị otu nchekwa Xygeni bipụtara n'ọnwa a:

• JulesJacker, mkpọsa npm malware nke nwere ọtụtụ ogbo na-eme ka onye nnọchi anya Jules AI nke Google iji zuru ebe nchekwa, mmegbu CI/CD gburugburu ebe obibi, ọbụna lekwasị anya na sandbox na-enyocha ya. Mgbasa ozi ahụ webatara ihe nchekwa e zoro ezo nke e ji aka họpụta, nke e ji aghụghọ mepụta. google-labs-jules[bot] commits, izu ohi metadata igwe ojii, na nyocha Kubernetes megide akụrụngwa nyocha n'onwe ya.
• PhantomBot, mkpọsa npm ọjọọ na-eji obere akpa adịgboroja, blockchain, na ngwa Web3 eme ihe iji zuru asambodo, mebie gburugburu ndị mmepe, ma lekwasị anya na usoro ọrụ metụtara crypto site na mmegbu ịdabere na ya na nnyefe ibu ọrụ akwadoro.
• Etiti ihe owuwu npm dị njọ nke na-eji ngwa TypeScript adịgboroja eme ihe, ngwugwu AI, imepụta ngwaọrụ dị n'ime, ọbá akwụkwọ frontend, ndị enyemaka igwe ojii, na usoro ihe owuwu iji mee ka akara mkpịsị aka dị na gburugburu mkpịsị aka, wepụ nzere, tinye ntachi obi, ma mebie sistemụ ndị nrụpụta.
• Na-aga n'ihu nke ngwugwu ọjọọ na-eji mgbagwoju anya ịdabere, ide ihe ederede, mmegbu mgbe nrụnye gasịrị, iṅomi ngwaọrụ AI, mmụba nke ụdị, na mmegbu aha ugboro ugboro nke e mere iji zere usoro ntụkwasị obi nke ndị nrụpụta ma mebie usoro ọgbara ọhụrụ. SDLC usoro ọrụ tupu achọpụta.
• Nchọpụta nke mkpọsa malware dị iche iche dịka @jaggle/resizeobserves onye na-anapụ clipboard, nke mere ka ọ bụrụ ngwugwu ziri ezi mgbe ọ na-eji Python eme ihe n'ofe sistemụ Linux, macOS, na Windows.

N'ime ọnwa ahụ dum, anyị hụkwara njikọ na-eto eto n'etiti ngwaọrụ AI, gburugburu ebe obibi mepere emepe, na mwakpo usoro ọkọnọ ngwanrọ. Ndị na-eyi egwu na-elekwasị anya na usoro mmepe nke AI na-enyere aka, gburugburu ebe ndị nnọchi anya, ndị na-anya ụgbọelu, na ụlọ ndị sitere na igwe ojii. pipelinedịka akụkụ nke ọrụ nkwekọrịta nchekwa na izu ohi asambodo sara mbara.

Mwakpo ndị a abụghịzi ikpe nke ide ihe n'ụzọ dị mfe. Ha gụnyere mkpọsa mbipụta ahaziri ahazi, mgbawa nke ụdị akpaaka, izu ohi ihe ngosi ígwé ojii, CI/CD mmegbu, nhazi ibu ọrụ ezoro ezo, izere igbe sandbox, na usoro nkwekọrịta na-adịgide adịgide nke e mere kpọmkwem iji jikọta na gburugburu ebe obibi ndị mmepe a pụrụ ịtụkwasị obi.

Mmelite a kwa ọnwa bụ akụkụ nke atụmatụ Xygeni na-aga n'ihu na-eme nnyocha maka ihe iyi egwu malware na usoro ọkọnọ, ebe ndị otu anyị na-akwado ngwugwu ọjọọ mgbe niile, na-enyocha usoro mwakpo na-apụta, ma na-ebipụta ọgụgụ isi a na-arụ ọrụ iji nyere nchekwa aka, ndị otu AppSec, na DevSecOps ịnọ n'ihu ihe egwu nke usoro ọkọnọ na-agbanwe agbanwe.

Maka nkọwa zuru oke gbasara ngwugwu ọjọọ ọ bụla, mkpọsa malware, na nyocha iyi egwu nke e bipụtara n'ọnwa a, lelee nyocha zuru oke nke May Malicious Code Digest na nyocha metụtara ya site na Xygeni Security Team.