Kwa izu, sistemụ nchọpụta malware anyị na-enyocha ọtụtụ puku ngwugwu ọhụrụ na nke emelitere n'ofe ndebanye aha ọha dịka npm na PyPI. Izu a abụghị ihe dị iche.
Anyị kwadoro ihe karịrị ngwugwu ọjọọ 200 n'etiti June 12t na June 19, 2026, ọkachasị n'ofe npm, yana ikpe ndị ọzọ na PyPI. Ọtụtụ pụtara na otu ndị a haziri ahazi, mwepụta ọjọọ ugboro ugboro nke e bipụtara n'otu aha ma ọ bụ n'ezinụlọ ndị nwere njikọ chiri anya.
Ihe kacha pụta ìhè n'izu a bụ sensivity, nke juputara npm na ihe karịrị mbipụta 70 nke mbiputere n'ofe oke 2.5.x, ekwenyela n'ime ọtụtụ ụbọchị. Ndị ọzọ a ma ama gụnyere ọtụtụ @solana-labs usoro ntụpọ ndị na-elekwasị anya na gburugburu ebe obibi Solana (web3.js, web3-js, etherjs, spl-toke, ancor, web3js — n'ofe mkpọsa mbipụta abụọ dị iche iche na Juun 7 na Juun 8), @nstrlabs ezinụlọ (sdk, ixel, utils, shared-components, api-client, auth - mwakpo mgbagwoju anya dabere na oghere aha ngwugwu dị n'ime), @klapp-login-platform otu (native-sdk, oidc, routes - ime ka ọ bụ ikpo okwu nkwenye), internallib_v557 na internallib_v984 (ọtụtụ ụdị nke ndị aghụghọ dị n'ime ọbá akwụkwọ a na-amaghị ama), pocteszep (mbipụta isii e bipụtara na Juun 11), na otu ìgwè nke ọrụ crypto na Web3 gụnyere blockchain-helper-0, ethereum-kit-1, ethereum-kit-9, crypto-utils-7, wallet-sdk-9, defi-tools-39, swap-sdk-87, na farming-tools-12. The morningstar-design-system ngwugwu ahụ pụtara na nsụgharị atọ na Juun 10, na-eme ka ọ bụ usoro nhazi ego a ma ama.
Malite na Juun 13 gaa n'ihu, ọsọ ahụ gbasiri ike. houzidawang806 naanị otu cluster ahụ gụnyere ihe karịrị mbipụta 25 ebipụtara n'otu ụbọchị, nke ụmụnne sonyeere houzidawang807 na houzidawang808. The metrics-pipeline-d8k2 E bipụtaghachiri ngwugwu ahụ n'oge niile n'ofe mbipụta iri abụọ na otu n'etiti Juun 15 na Juun 18 - mkpọsa ịgbapụ aka na-aga n'ihu nke e mere iji nọrọ n'ihu ndepụta mkpọchi. friendly-greeter-demo ngwugwu ahụ nọgidere na-apụta ọzọ n'ọtụtụ nsụgharị n'izu ahụ dum. Mgbalị mgbagwoju anya ọhụrụ na-apụta n'okpuru xy-shared, axl-ui, loadninja-shared, carousel-controller-mixin, token-prices-cron, hemi-supply-cron, portal-backend, vault-strategies, na ọtụtụ ndị ọzọ — ha niile nwere ọnụọgụ mbipụta ebuliri elu na oke 999.x. Otu ìgwè ọhụrụ nke aha ọrụ izugbe nwere mgbakwunye hex na-enweghị usoro (color-utils-dee0, data-utils-d703, string-tools-be6c, type-check-816d, fmt-helpers-794b, metrics-probe-*) pụtara na Juun 18–19, dịka ndebanye aha ọtụtụ mmadụ si dị. Izu ahụ mechiri na trimprompt, trimprompt-hub, claude-cup, na web3-crypto-address-utils kwadoro na Juun 19. Na PyPI, neuralbridge-sdk (nsụgharị ise n'ofe 4.5.x–5.1.x), deepstrain, teambot-ai, hello-test-s1, na aiaddin-agent e kwadoro n'izu ahụ dum.
Ndị a abụghị ihe ndị a na-anaghị ahụ anya. Ihe pụtara ìhè n'izu a bụ mmụba nke mwakpo mgbagwoju anya ịdabere megide oghere aha ngwugwu dị n'ime, mkpọsa mbipụta ọtụtụ ụbọchị na-aga n'ihu nke e mere iji gafere nbudata, na-aga n'ihu na-elekwasị anya na ngwaọrụ Web3 na DeFi (usoro nke gbagoro nke ukwuu na 2026), na ojiji na-eto eto nke aha ngwugwu nkịtị, dị ka mkpọtụ e mepụtara iji zere nchọpụta site na ịgwakọta na osisi ịdabere nkịtị.
Foto a nke izu ụka a bụ akụkụ nke Mwakpo Koodu Nsogbu anyị na-aga n'ihu, ebe anyị na-akwado ihe iyi egwu ọhụrụ ma na-enye ọgụgụ isi dị irè iji nyere ndị otu DevSecOps aka ichebe ha. pipelinetupu mmebi emee. Ka anyị kọwaa ihe anyị hụrụ n'izu a na ihe kpatara ya ji dị mkpa.
Ekwela ka mkpọsa ndị a haziri ahazi ruo gị aka Pipelines
Nchịkọta nke izu a abụghị maka otu ihe iyi egwu; ọ dị ka oke. Ihe karịrị ngwugwu 200 akwadoro, ụdị ya na-aga n'ihu na-ejupụta ọtụtụ ụbọchị, na mkpọsa ndebanye aha buru ibu nke na-agba ọsọ ọsọ karịa ka nyocha aka nwere ike ịchọpụta. Ndị mwakpo ahụ anaghị echere ka ị hụta.
Nchọpụta Malware Xygeni n'oge Na-enyocha npm, PyPI, na ndekọ ndị ọzọ mgbe niile, na-egosi ihe iyi egwu n'oge mbipụta ahụ, ọ bụghị mgbe ha rutere n'ime ụlọ. Mgbe mkpọsa bipụtara ụdị 21 nke otu ngwugwu ọjọọ ahụ n'ime ụbọchị anọ, nyocha kwa izu anaghị ejide ihe ọ bụla n'oge.
Xygeni's Open Source Security ngwọta na-enye ndị otu DevSecOps gị ohere ịhụ ihe na ihe kacha mkpa ha kwesịrị ime iji nọrọ n'ihu ụdị nrụgide a haziri ahazi, yabụ nke a bụ pipelines nọgide na-adị ọcha n'emeghị ka ndị otu gị ghara ịdị nwayọ.
