NPM malware taa na-aga n'ihu na-agbanwe agbanwe, ebe ndị mwakpo na-ebipụta akwụkwọ koodu obi ojoo, ngwugwu npm ọjọọ, na Ngwugwu ọjọọ PyPI emebere iji lekwasị anya na usoro mmepe, CI/CD pipelines, na usoro ihe ndị dị ndụ nke mepere emepe. Nchịkọta Koodu Ọjọọ bụ akụkọ nyocha Xygeni na-aga n'ihu nke na-esochi ma na-enyocha ezigbo ngwugwu ọjọọ n'ofe npm, P&IP, Usoro VS, na OpenVSX, gụnyere ụzọ azụ akwadoro, ndị na-ezu ohi data, ibu ọrụ iwepụ ihe nzacha akwụkwọ ikike, na mkpọsa malware nke nwere ọtụtụ ụdị akpaghị aka.
Ndị otu nyocha anyị na-emelite ibe a mgbe niile na nchọpụta akwadoro, ihe ngosi nke nkwekọrịta (IOCs), ụkpụrụ omume, na technical analysisN'ihi ya, ndị mmepe, Ndị otu AppSec, ndị injinia nchekwa nwere ike ịnọ n'ihu npm malware taa na ihe omume ngwugwu ọjọọ na-apụta na-emetụta usoro ọkọnọ ngwanrọ nke oge a.
NPM Malware Taa: Nchịkọta Izuụka 24–29 Eprel 2026
Ndị nchọpụta kwadoro Ngwungwu ọjọọ 97 n'ofe ndebanye aha ọha n'oge a.
Nchọpụta nke Ebe Nchekwa Data
- E bipụtara ọtụtụ ngwugwu akwadoro na npm
- Ikpe ndị ọzọ metụtara P&IP, OpenVSX, na andiwet
- Mbipụta ọjọọ ugboro ugboro n'otu ezinụlọ ngwugwu ahụ na aha ndị metụtara ya
- Ụdị nsụgharị dị elu ma ọ bụ nke na-adịghị mma dịka 99.x, 99.9.x, na 1.0.x
- Ojiji siri ike nke ịkwụ ụgwọ na ịkwụ ụgwọ, enterprise-nke, ngwa weebụ dị n'ime, nchịkọta, Ntọala UI, ngwaọrụ onye mmepụta, isiokwu igwe ojii, na ihe metụtara akụkụ ụkpụrụ aha
- Ọtụtụ mgbanwe nhazi nke ụdị ahaziri ahazi ka ha yie mmelite ngwugwu ziri ezi
Akụkọ Malware Kwa Ọnwa: Ngwugwu npm Ọjọọ akwadoro na Eprel 2026
Nnọọ na mbipụta kachasị ọhụrụ nke Nchịkọta Koodu Ọjọọ Xygeni (Mbipụta Kwa Ọnwa). na April 2026, ndị otu nyocha anyị kwadoro ihe karịrị ngwugwu ọjọọ 250, nke kachasị gafee npm, yana ikpe ndị ọzọ metụtara PyPI, VS Code, OpenVSX, na Onye Na-ede Ihe.
Eprel abụghị naanị maka olu. ebili mmiri mbipụta na-achịkwa na akpaaka, mkpọsa onu oriri nke ụdị siri ike, Nchịkọta ezinụlọ ngwugwu, na n'ime ngwaọrụ, anyị hụrụ ụfọdụ n'ime usoro kachasị pụta ìhè nke ọnwa a na mbipụta ọjọọ a haziri ahazi n'ofe:
Ngwa ọrụ dị n'ime adịgboroja, ngwugwu isiokwu AI, modulu ịkwụ ụgwọ na ndenye ego, ndị ahịa nyocha, ihe ndị dị n'ihu, ngwa ndị nrụpụta, Kubernetes na ngwaọrụ igwe ojii, ndọtị VS Code na OpenVSX, yana aha ngwugwu a pụrụ ịtụkwasị obi nke e mere iji jikọta na nnyefe ngwanrọ n'ezie pipelines.
Ndị a abụghị ihe ndị mere n'ịdepụta mkpụrụedemede ederede dị mfe. April dataset, anyị hụrụ ụkpụrụ mmegbu nzere ntozu, njikwa usoro ọkọnọ, iji aha oghere ugboro ugboro mee ihe, na mbipụta ọjọọ a haziri ahazi emebere ya ka ọ gwakọta n'ime gburugburu ebe ndị mmepụta ihe n'ezie na nnyefe ngwanrọ pipelines.
N'ime data sara mbara, anyị gara n'ihu na-elele mbipụta ọtụtụ ụdị ederede scripted, atụmatụ nsụgharị ebuliri elu, ịkwụ ụgwọ - na enterprise-aha isiokwu, Aha ngwugwu isiokwu AI na nke nnọchite anya, Nnwale SDK na frontend nke ihe mejupụtara, ihe e ji eme ihe dị n'ime, na usoro ochie dịka mgbagwoju anya nke ịdabere na data exfiltration.
Akụkọ a bụ akụkụ nke akụkọ anyị na-aga n'ihu Nchịkọta Koodu Ọjọọebe anyị na-akwado ihe iyi egwu ọhụrụ ma na-enye ọgụgụ isi na-arụ ọrụ nyere aka Ndị otu DevSecOps nọrọ n'ihu software ọkọnọ n'ihe ize ndụ.
| Ngwurugwu | ngwugwu | Ụbọchị |
|---|---|---|
| npm | akara pa:99.1.10 | Apr 27, 2026 |
| pypi | njikọta mpaghara-moonbit:0.2.3 | Apr 27, 2026 |
| npm | @alfa.ndụ.mapp/app.web:99.0.13 | Apr 27, 2026 |
| npm | @sbt_gitverse/analytics-client:99.0.1 | Apr 27, 2026 |
| npm | @frengki0707/google-cloud-clone:1.33.1 | Apr 27, 2026 |
| npm | @alfa.ndụ.mapp/app.web:99.0.14 | Apr 27, 2026 |
| npm | @tochka-ui/ntọala:99.0.2 | Apr 27, 2026 |
| openvsx | ihe na-akpali akpali/ubel:0.1.0 | Apr 28, 2026 |
| npm | @2011-08-19/n:99.9.9 | Apr 28, 2026 |
| npm | @frengki0707/google-cloud-clone:1.38.0 | Apr 27, 2026 |
Otu Anyị Si Achọpụta Koodu Ọjọọ na Malware NPM na PyPI Malware
Xygeni na-eji usoro dị iche iche iji kwụsị koodu ọjọọ tupu ọ gbasaa. Nke mbụ, nyocha koodu static na-achọpụta usoro obfuscation, ibu ọrụ zoro ezo, na mmegbu edemede. Na mgbakwunye, nyocha sandboxing omume na-enyocha ntinye. hooks, iwu oge ọsọ, na aghụghọ ntachi obi. Ọzọkwa, nchọpụta mmụta igwe na-achọpụta ụdị malware npm efu na malware pypi nke ndị nyocha mbinye aka na-efu. N'ikpeazụ, Sistemụ Ịdọ Aka Ná Ntị Mbụ na-enyocha ebe nchekwa ọha na eze n'oge, na-akwado nchọpụta, ma na-agwa ndị otu DevOps ozugbo.
N'ihi ya, njikọta a na-eme ka ndị mmepe nweta ọgụgụ isi dị ngwa ngwa, nke a pụrụ itinye ozugbo na ya. CI/CD workflows.
Ihe Mere Ndị Mmepụta Ji Kwesị Ịnagide Banyere Ngwugwu Npm Ọjọọ
Ihe iyi egwu nke oge a anaghị adịkarị echere oge ọrụ. Dịka ọmụmaatụ, ngwugwu npm ọjọọ na-arụkarị ọrụ n'oge nrụnye, ebe ngwugwu pypi na-ezochi mwepụ ihe nzacha ma ọ bụ ụzọ azụ. Ndị na-awakpo:
- Tụgharịa ihe nchekwa GitHub nkeonwe ka ọ bụrụ nke ọha na eze iji mee ka ha dịghachi ndụ.
- Wepụ ihe ndị e dere n'ime koodu iji wepụ ihe ndị e dere n'akwụkwọ njirimara na ihe nzuzo.
- Jiri ihe ndị na-ebu JavaScript nke e tinyere ihe na-adịghị mma iji tinye ransomware ma ọ bụ botnets.
N'eziokwu, ngwugwu ndị na-adịghị mma nke mepere emepe ruru pasent 156 n'ime otu afọ. Ya mere, ndị otu na-adabere naanị na nri ndị na-egbu oge ma ọ bụ nyocha ndị bụ isi na-ada azụ.
Ihe Akụkọ Malware a Na-esochi na npm na PyPI
Nchịkọta a bụ isi ihe dị mkpa maka:
- Ngwungwu npm ọjọọ akwadoro
- Ngwugwu ọjọọ pypi akwadoro
- Nchọpụta dabere na omume nke koodu ọjọọ
- Ihe omume ndị e kwadoro na ndekọ
- Nchịkọta akụkọ malware kwa izu na kwa ọnwa
- Mgbanwe akụkọ ihe mere eme nke nchọpụta npm malware na pypi malware niile
N'ikwu ya n'ụzọ ọzọ, ọ na-enye otu isi ihe ntụaka. Ndị otu nyocha na Xygeni na-emelite ibe a kwa izu site na njikọ gaa na nyocha teknụzụ zuru oke na GitHub IOCs.
Otu esi echebe megide ngwugwu npm na-adịghị mma na PyPI Malware
N'ihi ihe egwu a na-abawanye, ụlọ ọrụ chọrọ ihe karịrị nyocha ndabere ndị bụ isi. Nchedo siri ike megide ngwugwu npm ọjọọ na ngwugwu ọjọọ pypi chọrọ njikwa mgbochi na mmanye oge ọsọ:
Mee ka ntinye faịlụ mkpọchi naanị megide ngwugwu npm jọgburu onwe ya.
Iji npm ci or pip install --require-hashes in CI/CD.
Nke a na-eme ka a hụ na ejiri osisi ndabere akọwapụtara na faịlụ mkpọchi. N'ihi ya, ndị na-awakpo enweghị ike ịbanye na ụdị ngwugwu npm ọjọọ nke agbanwere ma ọ bụ nke edehie.
Nyocha tupu etinye maka npm Malware na PyPI Malware
Jikọta Xygeni's Early Warning Engine iji nyochaa npm malware na pypi malware tupu ngwugwu erute gburugburu gị.
Ọzọkwa, chọpụta ihe a na-enyo enyo postinstall edemede, ihe ndị na-ebu ibu, ma ọ bụ URL C2 e tinyere koodu siri ike.
Guardrails iji gbochie ihe owuwu site na iji koodu ọjọọ
Nịm guardrails ọ bụrụ na achọpụtara ngwugwu npm ọjọọ maọbụ ngwugwu ọjọọ nke pypi, ọ ga-ada ada na akpaghị aka.
Dịka ọmụmaatụ, mmebi iwu na ngwugwu nwere ndị na-edobebeghị ebipụta, usoro ihe mgbochi, ma ọ bụ ihe ndị yiri ya na IOC. N'ihi ya, koodu ọjọọ anaghị agafe ebe a na-ahụghị ya.
Mepụta ma kwado SBOMNgwugwu npm nke s megide ihe ọjọọ na PyPI Malware
Mepụta SBOMs (CycloneDX, SPDX) maka ihe owuwu ọ bụla.
Mgbe nke ahụ gasịrị, tụnyere ngwugwu npm ọjọọ a maara na nri pypi malware iji soro ma ndabere kpọmkwem na nke na-agafe agafe.
Nchedo Asambodo na Token site na npm Malware na PyPI Malware
Ọtụtụ ngwugwu npm ọjọọ na-agbalị ịgụ .npmrc, .pypirc, ma ọ bụ ihe ndị na-agbanwe gburugburu ebe obibi.
Ya mere, jiri ihe ndị e ji arụ ọrụ n'ime akpa siri ike nke nwere obere ihe nzuzo a na-ekpughe. Na mgbakwunye, jiri ndị njikwa nzuzo kama iji ihe ndị na-agbanwe gburugburu ebe obibi gbochie mmegbu koodu ọjọọ.
Lelee mgbanwe ndekọ na onye na-ahụ maka nchekwa na ngwugwu npm ọjọọ
Ndị na-awakpo na-ejikarị ọrụ ndị a gbahapụrụ agbahapụ eme ihe.
Karịsịa, lezie anya maka mgbanwe ndị na-elekọta ihe mberede, mwụfu ụdịdị pụrụ iche, ma ọ bụ mbipụta gabigara ókè na npm malware na ngwugwu ọjọọ pypi.
Ọzụzụ Ndị Mmepụta na Nchọpụta Koodu Ọjọọ na npm na PyPI
Kụziere ndị otu ka ha mata ọkọlọtọ ọbara ọbara dịka:
- Aha ngwugwu nwere njehie (
reqeustkamarequest). - Pụrụ iche
installorprepareederede. - Emepụtara ngwugwu ndị e mere n'oge na-adịbeghị anya nwere ọnụọgụgụ ụdị dị elu a na-enyo enyo.
Karịsịa, mmata a na-enyere aka ịchọpụta koodu ọjọọ n'oge.
Nchọpụta Nsogbu Oge Runtime maka Ngwugwu npm Ọjọọ na Malware PyPI
Ọ bụrụgodị na malware agafeela nyocha ndị na-anaghị agbanwe agbanwe, a na-achọpụta oge ọrụ na-aga n'ihu. CI/CD nwere ike ijide:
- Njikọ netwọk a na-atụghị anya ya.
- Mgbanwe sistemụ faịlụ na mpụga akwụkwọ ndekọ a tụrụ anya ya.
- Mgbalị siri ike n'ọrụ niile.
N'ikpeazụ, nke a na-eme ka a hụ na a na-akwụsị malware npm na egwu pypi malware ọbụlagodi mgbe etinyere ya.
Site na ijikọta njikwa ndị a, otu ndị otu na-egbochi ngwugwu npm ọjọọ na ngwugwu ọjọọ pypi iru mmepụta mgbe niile pipelines.
Nwaa Ngwaọrụ Nchọpụta Malware nke Xygeni
Xygeni na-enye:
- Nchọpụta koodu ọjọọ n'oge a, gụnyere azụ ụlọ, spyware, na ransomware.
- N'adịghị ka ihe nyocha ndị bụ isi, nyocha n'ofe npm, PyPI, Maven, NuGet, RubyGems, na ndị ọzọ.
- Mkpọchi nrụpụta akpaka mgbe akụkọ malware chọpụtara ihe egwu dị na ya.
- Nghọta nke ihe na-eme, nlele aha onye na-elekọta, na nchọpụta ihe na-adịghị mma.
Mụrụnụ Mara
Ndị otu anyị na-emelite ibe a kwa izu. Iji nweta ịdọ aka ná ntị na akụkọ zuru ezu:
- Idenye aha na anyị Akwụkwọ Akụkọ
- soro @XygeniNchekwa na Linkedin
- Debe ibe a ka ị soro ihe kachasị ọhụrụ npm malware na pypi malware egwu
