Ihe fọrọ nke nta ka ọ bụrụ izu ọ bụla, sistemụ nchọpụta malware anyị na-enyocha ọtụtụ puku ngwugwu ọhụrụ na nke emelitere n'ofe ndebanye aha ọha dịka npm na PyPI. Izu a abụghị ihe dị iche.
Anyị kwadoro ihe karịrị ngwugwu ọjọọ 130 n'etiti June 7 na June 12, 2026, ọkachasị npm, yana ikpe ndị ọzọ na PyPI. Ọtụtụ pụtara na otu ndị a haziri ahazi, mwepụta ọjọọ ugboro ugboro nke e bipụtara n'otu aha ma ọ bụ n'ezinụlọ ndị nwere njikọ chiri anya.
Ihe kacha pụta ìhè n'izu a bụ sensivity, nke juputara npm na ihe karịrị mbipụta 40 nke mbiputere n'ofe oke 2.5.x, ekwenyela n'ime ọtụtụ ụbọchị. Ndị ọzọ a ma ama gụnyere ọtụtụ @solana-labs typosquats na-elekwasị anya na gburugburu Solana (web3.js, web3-js, etherjs, spl-toke, ancor, web3js — n'ofe mkpọsa mbipụta abụọ dị iche iche na Juun 7 na Juun 8), @nstrlabs ezinụlọ (sdk, ixel, utils, shared-components, api-client, auth — mwakpo mgbagwoju anya dabere megide oghere aha ngwugwu dị n'ime), @klapp-login-platform otu (native-sdk, oidc, ụzọ — na-eme ka ọ bụrụ ikpo okwu nkwenye), internallib_v557 na internallib_v984 (ọtụtụ ụdị nke ndị aghụghọ dị n'ime ọbá akwụkwọ a na-amaghị ama), pocteszep (mbipụta isii e bipụtara na Juun 11), na otu ìgwè nke ọrụ crypto na Web3 gụnyere blockchain-helper-0, ethereum-kit-1, ethereum-kit-9, crypto-utils-7, wallet-sdk-9, defi-tools-39, swap-sdk-87, na farming-tools-12. The morningstar-design-system ngwugwu ahụ pụtara na nsụgharị atọ na Juun 10, na-eme ka ọ bụ usoro nhazi ego a ma ama. Na PyPI, helixagentai, telegramlite, na cdjeez e kwadoro n'izu ahụ dum.
Ndị a abụghị ihe ndị a na-adịghị ahụkebe. Ihe pụtara ìhè n'izu a bụ mmụba nke mwakpo mgbagwoju anya dabere na ndị mmadụ megide oghere aha dị n'ime ngwugwu ahụ, mbipụta nke ọtụtụ ụbọchị nke akwụkwọ ahụ. sensivity otu, na ihe mgbaru ọsọ na-aga n'ihu nke iji ngwa ọrụ Web3 na Solana, ụkpụrụ nke amụbaala nke ukwuu na 2026.
Foto a nke izu ụka a bụ akụkụ nke Mwakpo Koodu Nsogbu anyị na-aga n'ihu, ebe anyị na-akwado ihe iyi egwu ọhụrụ ma na-enye ọgụgụ isi dị irè iji nyere ndị otu DevSecOps aka ichebe ha. pipelinetupu mmebi emee.
Ka anyị kọwaa ihe anyị hụrụ n'izu a na ihe kpatara o ji dị mkpa.
Ekwela ka ngwugwu ọjọọ ruo mmepụta
A na-eji ngwugwu ndị otu gị na-adabere na ha eme ihe dị ka ebe ntinye. Nchọpụta Malware Xygeni n'oge na-enyocha ndekọ n'oge, yabụ a na-egbochi iyi egwu dịka ndị dị na nchịkọta izu a tupu ha erute n'ụlọ gị.
Ihe ndị a chọpụtara n'izu a na-echetara anyị na atụmatụ ndị a na-eme ka a mara ihe. Iju mmiri nke ụdị ya, ịkpọ aha oghere, na mkpọsa ndị a haziri ahazi maka ọtụtụ ụbọchị abụghịzi okwu ndị a na-ekwu okwu ha. standard Akwụkwọ egwuregwu onye na-awakpo. Nyocha otu oge na nyocha aka enweghị ike ịga n'ihu na mkpọsa ndị na-ebipụta ọtụtụ nsụgharị n'ime ọtụtụ ụbọchị na ndekọ n'otu oge.
Xygeni's Open Source Security ngwọta na-enye ndị otu DevSecOps gị ohere ịhụ ihe na-emerụ ahụ n'oge mbipụta ahụ, na-achọpụta ihe dị ize ndụ n'ezie, na-ebute ụzọ n'ihe ize ndụ a na-apụghị irite uru, na-ebelata ụzọ site na nchọpụta ruo na mmezi. Ya mere, ndị otu gị nwere ike ibuga ngwa ngwa n'enweghị nsogbu na nchekwa.
