Kwa izu, sistemụ nchọpụta malware anyị na-enyocha ọtụtụ puku ngwugwu ọhụrụ na nke emelitere n'ofe ndebanye aha ọha dịka npm na PyPI. Izu a abụghị ihe dị iche.
Anyị kwadoro ihe karịrị ngwugwu ọjọọ iri itoolu n'etiti June 26 na Julaị 3, 2026, n'ofe npm na PyPI, ọtụtụ mkpọsa na-aga n'ihu site n'izu ndị gara aga na ndị ọhụrụ na-apụta.
The nolimit-agent mkpọsa ahụ gara n'ihu na-ebipụta ụdị ọhụrụ (1.0.306, 1.0.315, 1.0.316), na-agbatị usoro phishing ngwaọrụ Microsoft 365 nke anyị dekọrọ nke ọma na nke anyị. Akụkọ DeviceDoor. The anthropic-toolkit cluster bụ mkpọsa ọhụrụ kachasị, e kwadoro ụdị 20 naanị na June 30 — na-elekwasị anya kpọmkwem na ngwugwu ndị metụtara ngwaọrụ ndị mmepe Anthropic. cursed-modules ezinụlọ bipụtara ihe karịrị mbipụta iri na ise n'etiti Julaị 1 na Julaị 2 n'ofe ha abụọ. standard na ọnụọgụgụ ụdịdị e buliri elu (999.x), na-esochi akwụkwọ egwuregwu mgbagwoju anya nke ịdabere. date-fns-lite cluster (mbipụta ise, Julaị 2) gara n'ihu n'usoro nke ime ka ọ dị ka ngwugwu ọrụ ziri ezi, nke a na-ejikarị eme ihe n'ọtụtụ ebe.
Ụkpụrụ ebumnuche ngwa ọrụ AI nke e guzobere n'izu gara aga na ollama-helpers na openai-agents-helpers gbasaa n'ime oge a na ai-explain, ai-sdk-helpers, na @langgraphjs/toolkit, ihe niile akwadoro n'etiti June 28 na June 30. @szc-ft/mcp-szcd-client ngwugwu (ụdị 0.38.0 na 0.39.0, akwadoro na Julaị 2) webatara usoro ọhụrụ anyị na-eso dị ka SkillLeak: ihe nchọpụta nzere zoro ezo n'ime nkà MCP kama njikọ nrụnye, nke ndị nyocha na-akwụsị mgbe nrụnye gasịrị na-anaghị ahụ anya. Anyị bipụtara Nyocha SkillLeak zuru ezu ebe a.
Foto a nke izu ụka a bụ akụkụ nke ihe anyị na-eme ugbu a Nchịkọta Koodu Ọjọọebe anyị na-akwado ihe iyi egwu ọhụrụ ma na-enye ọgụgụ isi dị irè iji nyere ndị otu DevSecOps aka ichebe ha pipelinetupu mmebi emee. Ka anyị kọwaa ihe anyị hụrụ n'izu a na ihe kpatara ya ji dị mkpa.
Ngwugwu 90+. Otu izu. Pipeline Ọ bụ ihe mgbaru ọsọ ahụ.
Nchịkọta nke izu a na-egosi mgbanwe na ntinye uche nke ndị na-awakpo, ọ bụghị naanị olu, kamakwa tupucision. Iju mmiri nke ụdị na-adịgide adịgide, mkpokọta ngwaọrụ AI, izu ohi asambodo MCP, na mwakpo mgbagwoju anya dabere na ndị ọzọ megide oghere aha monorepo dị n'ime. Mgbasa ozi ndị a na-akpaghị aka ma na-aga n'ihu. Nnyocha kwa izu abụghị ihe nchebe.
Ịdọ Aka Ná Ntị Banyere Malware Mmalite Xygeni Na-enyocha npm, PyPI, na ndekọ ndị ọzọ n'oge dị adị, na-egosi ihe iyi egwu n'oge mbipụta, tupu ha erute nrụpụta, tupu onye nnọchi anya AI etinye ha n'onwe ya, na tupu ibu ọrụ ụdị SkillLeak enwee ohere imezu. anthropic-toolkit na-ebipụta ụdị iri abụọ n'otu ụbọchị maọbụ cursed-modules idei mmiri npm na ụdị 999.x n'ime ụbọchị abụọ, nchọpụta nke na-aga n'ihu mgbe eziokwu ahụ gasịrị agafeela oge.
Xygeni's Open Source Security ikpo okwu na-enye ndị otu DevSecOps nchọpụta na ntinye ihe dị mkpa ozugbo iji nọrọ n'ihu nrụgide usoro ọkọnọ nhazi, yabụ nke a bụ pipelines nọgide na-adị ọcha n'emeghị ka ndị otu gị ghara ịdị nwayọ.
