Sugeng rawuh ing Xygeni Malicious Code Digest edisi Mei. Wulan iki, tim riset keamanan kita terus nglacak lanskap ancaman rantai pasokan piranti lunak sing berkembang ing registri paket umum, piranti pangembang, alur kerja sing dibantu AI, lan piranti lunak modern. CI/CD lingkungan. Sajrone wulan Mei, Xygeni ngidentifikasi lan mvalidasi atusan paket jahat sing nargetake ekosistem npm, PyPI, VS Code, lan OpenVSX.
Nanging Mei ora mung babagan volume. Iku uga sasi ing ngendi para penyerang saya akeh adaptasi karo keahliane menyang lingkungan pangembangan asli AI, asumsi kepercayaan pangembang, lan otomatisasi. pipelines.
Antarane investigasi paling penting sing diterbitake dening Tim Keamanan Xygeni sasi iki:
- JulesJacker, kampanye malware npm multi-tahap sing nyamar dadi agen Jules AI Google kanggo nyolong repositori, penyalahgunaan CI/CD lingkungan, lan malah nargetake sandbox sing nganalisa. Kampanye kasebut ngenalake loader host-gated sing dienkripsi, ditempa
google-labs-jules[bot]commits, pencurian metadata méga, lan pengintaian Kubernetes marang infrastruktur analisis kasebut dhéwé. - PhantomBot, kampanye npm sing mbebayani sing nyalahgunakake dompet palsu, blockchain, lan piranti Web3 kanggo nyolong kredensial, ngganggu lingkungan pangembang, lan nargetake alur kerja sing ana gandhengane karo crypto liwat penyalahgunaan katergantungan lan pangiriman muatan bertahap.
- Ekosistem npm jahat skala gedhe sing nyalahgunakake utilitas TypeScript palsu, paket bertema AI, peniruan tooling internal, pustaka frontend, pembantu awan, lan kerangka kerja pembangun kanggo lingkungan sidik jari, ngekstrak kredensial, nyebarake persistensi, lan ngganggu sistem pangembang.
- Gelombang paket jahat sing terus-terusan sing nggunakake kebingungan dependensi, typosquatting, penyalahgunaan pasca-instalasi, peniruan alat AI, inflasi versi, lan penyalahgunaan namespace bola-bali sing dirancang kanggo ngliwati heuristik kepercayaan pangembang lan ngorbanake sistem modern. SDLC alur kerja sadurunge deteksi.
- Panemon kampanye malware lintas platform kayata
@jaggle/resizeobservespembajak clipboard, sing nyamar dadi paket sing sah nalika nggunakake persistensi berbasis Python lan substitusi clipboard crypto-wallet ing sistem Linux, macOS, lan Windows.
Sajrone sasi iki, kita uga mirsani konvergensi sing saya tambah antarane piranti AI, ekosistem sumber terbuka, lan serangan rantai pasokan piranti lunak. Para pelaku ancaman saya akeh ngincer alur kerja pangembangan sing dibantu AI, lingkungan agen, kopilot, lan pembangunan asli awan. pipelines minangka bagéan saka operasi pencurian kredensial lan kompromi repositori sing luwih jembar.
Serangan-serangan iki ora mung kasus typosquatting sing kapisah. Serangan-serangan iki nglibatake kampanye penerbitan sing terkoordinasi, semburan versi otomatis, pencurian token awan, CI/CD penyalahgunaan, pementasan muatan terenkripsi, penghindaran sandbox, lan teknik kompromi persisten sing dirancang khusus kanggo nyampur karo ekosistem pangembang sing dipercaya.
Nganyari saben wulan iki minangka bagéan saka inisiatif riset ancaman malware lan rantai pasokan Xygeni sing terus-terusan, ing ngendi tim kita terus-terusan validasi paket jahat, nyelidiki pola serangan sing muncul, lan nerbitake intelijen sing bisa ditindakake kanggo mbantu tim keamanan, AppSec, lan DevSecOps tetep unggul saka risiko rantai pasokan sing berkembang.
Kanggo konteks lengkap ing saben paket malware, kampanye malware, lan analisis ancaman sing diterbitake ing sasi iki, jlentrehake Ringkesan Kode Malicious lengkap Mei lan riset sing gegandhengan saka Tim Keamanan Xygeni.
Minggu 4: Luwih saka 104 Paket Ditemokake
| Ekosistem | paket | tanggal |
|---|---|---|
| npm | @gbrlxvii/ts-form-utils:4.6.0 | Muga 25, 2026 |
| npm | @gbrlxvii/ts-form-utils:4.7.0 | Muga 25, 2026 |
| npm | pi-ocr:0.2.0 | Muga 25, 2026 |
| npm | @jaggle/resizeobserves:1.0.11 | Muga 25, 2026 |
| npm | toko-fnd:0.0.7 | Muga 25, 2026 |
| npm | @gbrlxvii/ts-project-lint:1.7.0 | Muga 25, 2026 |
| npm | @gbrlxvii/ts-project-lint:1.8.0 | Muga 25, 2026 |
| npm | pengenal-pangguna-sistem-cli:7.0.0 | Muga 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.13 | Muga 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.12 | Muga 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.15 | Muga 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.14 | Muga 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.16 | Muga 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.19 | Muga 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.17 | Muga 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.18 | Muga 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.20 | Muga 26, 2026 |
| npm | iklan-internasional:99.0.1 | Muga 26, 2026 |
| npm | tata letak-tempo:99.0.0 | Muga 26, 2026 |
| npm | tata letak-tempo:99.0.2 | Muga 26, 2026 |
| npm | itc-actors-api:99.0.0 | Muga 26, 2026 |
| npm | modul-sing-dibarengi-walmart:99.0.1 | Muga 26, 2026 |
| npm | komponen-wml:99.0.1 | Muga 26, 2026 |
| npm | platform-tempo:99.0.1 | Muga 26, 2026 |
| npm | wml-core:99.0.1 | Muga 26, 2026 |
| npm | @izumiswap/sdk:3.0.3 | Muga 26, 2026 |
| npm | @izumiswap/sdk:3.0.4 | Muga 26, 2026 |
| npm | @izumiswap/sdk:3.0.5 | Muga 26, 2026 |
| npm | json-to-simple-graphql-schema:1.0.0 | Muga 26, 2026 |
| npm | aplikasi-cdk-reaktif:1.0.1 | Muga 27, 2026 |
| npm | mmt-statis:1.0.0 | Muga 27, 2026 |
| npm | aplikasi-cdk-reaktif:1.0.4 | Muga 27, 2026 |
| npm | cdk-sagemaker-notebook-alur kerja:1.0.3 | Muga 27, 2026 |
| npm | panemuan-mbangun:1.0.0 | Muga 27, 2026 |
| pypi | jagadingkanga:1.0.4 | Muga 27, 2026 |
| npm | forge-jsxy:1.0.92 | Muga 27, 2026 |
| npm | @gs-select/aplikasi-klien-tabungan:99.0.0 | Muga 27, 2026 |
| npm | forge-jsxy:1.0.105 | Muga 27, 2026 |
| npm | forge-jsxy:1.0.107 | Muga 27, 2026 |
| npm | forge-jsxy:1.0.108 | Muga 27, 2026 |
| npm | otentikasi-mse-editorial-ui:99.0.1 | Muga 28, 2026 |
| npm | kode-editor:99.0.1 | Muga 28, 2026 |
| npm | komponen-alat-mse:99.99.100 | Muga 28, 2026 |
| npm | forge-jsxy:1.0.120 | Muga 28, 2026 |
| npm | @gbrlxvi/ts-form-utils:1.0.0 | Muga 29, 2026 |
| vscode | asisten-pangembang-rudranex:1.0.1 | Muga 29, 2026 |
| npm | nemo-reporter:1.8.2 | Muga 29, 2026 |
| npm | @qlab/ui:2.0.5 | Muga 29, 2026 |
| npm | forge-jsxy:1.0.121 | Muga 29, 2026 |
| npm | @qlab/ui:2.0.6 | Muga 29, 2026 |
| npm | @qlab/komponen-intelijen:2.0.6 | Muga 29, 2026 |
| npm | persiyapan mesin telusur:1.0.9106 | Muga 29, 2026 |
| npm | piranti-persiyapan-buka-telusuran:1.0.9107 | Muga 29, 2026 |
| npm | @0xlr/vercel-analytics:999.0.0 | Muga 29, 2026 |
| npm | @0xlr/garis-ngarep:999.0.0 | Muga 29, 2026 |
| npm | @0xlr/stripe-checkout-js:999.0.0 | Muga 29, 2026 |
| npm | @0xlr/sentry-web:999.0.0 | Muga 29, 2026 |
| npm | @0xlr/juru-auth:999.0.0 | Muga 29, 2026 |
| npm | @0xlr/supabase-db:999.0.0 | Muga 29, 2026 |
| npm | @0xlr/prisma-client-js:999.0.0 | Muga 29, 2026 |
| npm | @flexspec/cli:0.3.1-dev.26612027722 | Muga 29, 2026 |
| npm | @cloudplatform-single-spa/administrasi:99.99.100 | Muga 30, 2026 |
| npm | @cloudplatform-single-spa/svp-s3-storage:99.99.100 | Muga 30, 2026 |
| npm | @maximvs1538/os-npm:99.0.0 | Muga 30, 2026 |
| npm | @ease-entry/landing-routes:99.9.5 | Muga 30, 2026 |
| npm | @entri-gampang/pendaftaran-njaba-navigator-fop:99.9.5 | Muga 30, 2026 |
| npm | @ease-entry/rute:99.9.5 | Muga 30, 2026 |
| npm | cms-github:4.2.4 | Muga 30, 2026 |
| npm | @t-in-one/form_product_token:5.7.1 | Muga 30, 2026 |
| npm | @capibar.chat/ui-kit:99.5.7 | Muga 30, 2026 |
| npm | cms-helpgit:4.2.6 | Muga 30, 2026 |
| npm | cms-helpgit:4.2.8 | Muga 30, 2026 |
| vscode | xampp-manager:5.1.3 | Muga 30, 2026 |
| npm | @template-obrolan/auth:1.0.0 | Muga 31, 2026 |
| npm | cms-storehub:1.3.4 | Muga 31, 2026 |
| npm | cms-storehub:1.3.5 | Muga 31, 2026 |
| npm | strategi-lokasi-ritel-frontend:1.1.1 | Muga 31, 2026 |
| npm | strategi-lokasi-ritel-frontend:1.1.2 | Muga 31, 2026 |
| npm | cms-storehub:1.3.6 | Muga 31, 2026 |
| pypi | simtooreal-cli:0.3.0 | Jun 01, 2026 |
| npm | conversa-sdk:2.0.2 | Jun 01, 2026 |
| npm | veltrix:9.0.0 | Jun 01, 2026 |
| npm | jingmeideshishi: 1.0.4 | Jun 01, 2026 |
| npm | @tse-digital/inti:99.0.0 | Jun 01, 2026 |
| npm | @telenor-se/core:99.0.0 | Jun 01, 2026 |
| npm | @ownit/inti:99.0.0 | Jun 01, 2026 |
| npm | jingmeideshishi: 1.0.5 | Jun 01, 2026 |
| npm | dokumen pasien:75.0.0 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.69 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.68 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.82 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.80 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.81 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.83 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.3 | Jun 01, 2026 |
| npm | veltrix:9.0.1 | Jun 01, 2026 |
| npm | @emcd-vue/auth:6.4.9 | Jun 01, 2026 |
| npm | @emcd-vue/b2b-payform:5.7.4 | Jun 01, 2026 |
Minggu 3: Luwih saka 106 Paket Ditemokake
| Ekosistem | paket | tanggal |
|---|---|---|
| npm | erslove:1.22.12 | Muga 16, 2026 |
| npm | dit-envv:17.4.2 | Muga 16, 2026 |
| npm | briantreehttp:0.4.0 | Muga 16, 2026 |
| npm | bot-sinkronisasi-curang:1.0.0 | Muga 16, 2026 |
| openvsx | bingcha / bcai-alat: 4.0.35 | Muga 16, 2026 |
| npm | paket-hello-world-value-value-p:1.0.11 | Muga 16, 2026 |
| npm | paket-hello-world-value-value-p:1.0.8 | Muga 16, 2026 |
| npm | paket-hello-world-value-value-p:1.0.9 | Muga 16, 2026 |
| npm | paket-hello-world-value-value-p:1.0.12 | Muga 16, 2026 |
| npm | axois-utils:1.0.6 | Muga 16, 2026 |
| npm | axois-utils:1.0.4 | Muga 16, 2026 |
| npm | inti-penulis-drama-venturo:1.0.8 | Muga 16, 2026 |
| npm | chalk-tempalte:1.0.16 | Muga 16, 2026 |
| npm | chalk-tempalte:1.0.14 | Muga 16, 2026 |
| npm | chalk-tempalte:1.0.20 | Muga 17, 2026 |
| npm | chalk-tempalte:1.0.19 | Muga 17, 2026 |
| npm | axois-utils:1.0.9 | Muga 17, 2026 |
| npm | @rocketreach/rr-components:9999.0.0 | Muga 17, 2026 |
| npm | @cplace-paw-fe/cf-training-extended:2.0.4 | Muga 18, 2026 |
| npm | simpul-server-tes-smtp:99.2.1 | Muga 18, 2026 |
| npm | simpul-server-tes-smtp:99.2.2 | Muga 18, 2026 |
| npm | @lir-portal/komponen-web:2.0.4 | Muga 18, 2026 |
| npm | @zentrafinance/kontrak:1.0.3 | Muga 18, 2026 |
| npm | @zentrafinance/protocol-config:1.0.3 | Muga 18, 2026 |
| npm | @zentrafinance/sdk:1.0.3 | Muga 18, 2026 |
| npm | @zentrafinance/jinis:1.0.3 | Muga 18, 2026 |
| npm | @zentrafinance/jinis:1.0.5 | Muga 18, 2026 |
| npm | @zentrafinance/protocol-config:1.0.6 | Muga 18, 2026 |
| npm | @zentrafinance/sdk:1.0.6 | Muga 18, 2026 |
| npm | @zentrafinance/jinis:1.0.7 | Muga 18, 2026 |
| npm | clementine-sdk:2.0.0 | Muga 18, 2026 |
| npm | citrea-utils:2.0.0 | Muga 18, 2026 |
| npm | @zentrafinance/protocol-config:2.0.1 | Muga 18, 2026 |
| npm | @zentrafinance/sdk:2.0.0 | Muga 18, 2026 |
| npm | @zentrafinance/jinis:2.0.1 | Muga 18, 2026 |
| npm | @zentrafinance/jinis:2.0.0 | Muga 18, 2026 |
| npm | bui-react-10hooks: 99.0.0 | Muga 18, 2026 |
| npm | bui-react-10components:99.0.0 | Muga 18, 2026 |
| npm | @deadcode09284814/axios-util:1.0.1 | Muga 18, 2026 |
| npm | @deadcode09284814/axios-util:1.0.0 | Muga 18, 2026 |
| npm | gaya-werna-utils:1.0.7 | Muga 18, 2026 |
| npm | simpul-env-resolve:1.2.0 | Muga 18, 2026 |
| npm | @easytipsportal/node-helper:1.0.1 | Muga 18, 2026 |
| npm | @zentrafinance/kontrak:2.0.2 | Muga 18, 2026 |
| npm | citrea-sdk:2.0.2 | Muga 18, 2026 |
| npm | clementine-sdk:2.0.2 | Muga 18, 2026 |
| npm | kreteg-citrea:2.0.2 | Muga 18, 2026 |
| npm | citrea-utils:2.0.2 | Muga 18, 2026 |
| npm | @zentrafinance/jinis:2.0.2 | Muga 18, 2026 |
| npm | simpul-apeksomni:1.0.0 | Muga 19, 2026 |
| npm | apex-trading:1.0.0 | Muga 19, 2026 |
| npm | apex-trading:1.0.1 | Muga 19, 2026 |
| npm | konektor-puncak:1.0.4 | Muga 19, 2026 |
| npm | apexpro-node:1.0.2 | Muga 19, 2026 |
| npm | konektor-puncak:1.0.3 | Muga 19, 2026 |
| npm | simpul-apeksomni:1.0.2 | Muga 19, 2026 |
| npm | apex-trading:1.0.2 | Muga 19, 2026 |
| npm | apexpro-node:1.0.3 | Muga 19, 2026 |
| npm | forge-jsxy:1.0.81 | Muga 19, 2026 |
| npm | forge-jsxy:1.0.90 | Muga 19, 2026 |
| npm | bungkus arit:0.2.1 | Muga 20, 2026 |
| npm | @doctolib-apps/layanan-pribadi-asli:99.99.99 | Muga 21, 2026 |
| npm | @doctolib-apps/layanan-pribadi-asli:1.0.0 | Muga 21, 2026 |
| npm | @doctolib-apps/layanan-pribadi-asli:1.0.1 | Muga 21, 2026 |
| pypi | kanga-hack:1.0.4 | Muga 21, 2026 |
| pypi | libhmac:0.8.28.1 | Muga 21, 2026 |
| npm | @limebike/supreme-data-grid:85.14.44 | Muga 21, 2026 |
| npm | @limebike/supreme-date-pickers:85.14.44 | Muga 21, 2026 |
| npm | @limebike/supreme-data-grid:85.14.48 | Muga 21, 2026 |
| pypi | ai-prishtina-agentic-kag:0.1.0 | Muga 21, 2026 |
| npm | hehehe:1.0.7 | Muga 21, 2026 |
| npm | pemindai-ancaman-defi:2.1.2 | Muga 22, 2026 |
| npm | auditor-kunci-penerapan:0.7.3 | Muga 22, 2026 |
| npm | eth-wallet-sentinel:1.0.9 | Muga 22, 2026 |
| npm | detektor-rahasia-web3:1.2.6 | Muga 22, 2026 |
| npm | pelindung-penyebaran-kekokohan:0.4.4 | Muga 22, 2026 |
| npm | pamriksan-keamanan-mnemonik:0.5.2 | Muga 22, 2026 |
| npm | pemindai-kredensi-kripto:2.0.2 | Muga 22, 2026 |
| npm | validator-kunci-rantai:0.2.3 | Muga 22, 2026 |
| npm | validator-kunci-rantai:0.2.4 | Muga 22, 2026 |
| npm | defi-env-auditor:0.3.3 | Muga 22, 2026 |
| npm | auditor-kunci-penerapan:1.8.2 | Muga 22, 2026 |
| npm | defi-env-auditor:1.4.2 | Muga 22, 2026 |
| npm | pelindung-penyebaran-kekokohan:1.5.2 | Muga 22, 2026 |
| npm | pamriksa-keamanan-dompet:2.1.3 | Muga 22, 2026 |
| npm | pelindung-penyebaran-kekokohan:1.5.3 | Muga 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.1 | Muga 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.3 | Muga 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.2 | Muga 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.5 | Muga 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.6 | Muga 22, 2026 |
| npm | pemindai-ancaman-defi:3.2.5 | Muga 22, 2026 |
| npm | pemindai-ancaman-defi:3.2.4 | Muga 22, 2026 |
| npm | defi-env-auditor:1.4.9 | Muga 22, 2026 |
| npm | detektor-rahasia-web3:2.3.6 | Muga 22, 2026 |
| npm | pamriksa-keamanan-dompet:2.1.6 | Muga 22, 2026 |
| npm | pamriksan-keamanan-mnemonik:4.0.0 | Muga 22, 2026 |
| npm | eth-wallet-sentinel:4.0.0 | Muga 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.7 | Muga 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.8 | Muga 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.4 | Muga 22, 2026 |
Minggu 2: Luwih saka 95 Paket Ditemokake
| Ekosistem | paket | tanggal |
|---|---|---|
| npm | win-env-setup:3.0.5 | Muga 11, 2026 |
| npm | ikon-reaksi-svgs:1.0.1 | Muga 11, 2026 |
| npm | money-badger-open-rpc:201.99.100 | Muga 11, 2026 |
| npm | utils-env-tanpa-server:1.0.0 | Muga 11, 2026 |
| npm | utils-env-tanpa-server:1.0.2 | Muga 11, 2026 |
| npm | utils-env-tanpa-server:1.0.3 | Muga 11, 2026 |
| npm | sahrbrucecode32:1.0.0 | Muga 11, 2026 |
| npm | claw_messenger:0.0.71 | Muga 11, 2026 |
| npm | @gbrlxvii/ts-form-utils:2.7.0 | Muga 11, 2026 |
| npm | bundler pasca-tuku:99.9.19 | Muga 11, 2026 |
| npm | bundler pasca-tuku:99.9.26 | Muga 11, 2026 |
| npm | bundler pasca-tuku:100.0.1 | Muga 11, 2026 |
| npm | bundler pasca-tuku:101.0.3 | Muga 11, 2026 |
| npm | rsflows-pexml:99.9.15 | Muga 11, 2026 |
| npm | rsflows-pexml:99.9.20 | Muga 11, 2026 |
| npm | bundler pasca-tuku:102.0.3 | Muga 11, 2026 |
| npm | rsflows-pexml:99.9.25 | Muga 11, 2026 |
| npm | bundler pasca-tuku:1.99.0 | Muga 11, 2026 |
| npm | surfing alon:10.0.0 | Muga 11, 2026 |
| npm | erslove:1.22.12 | Muga 11, 2026 |
| npm | dit-envv:17.4.2 | Muga 11, 2026 |
| npm | hehehe:1.0.4 | Muga 11, 2026 |
| npm | @gbrlxvii/ts-form-utils:3.7.0 | Muga 11, 2026 |
| npm | claw_messenger:0.0.74 | Muga 11, 2026 |
| openvsx | whatwedo/twig:1.2.7 | Muga 11, 2026 |
| openvsx | george-alisson/html-preview-vscode:1.2.7 | Muga 11, 2026 |
| openvsx | sohibe/java-generate-setters-getters:9.0.2 | Muga 11, 2026 |
| npm | dening vendor: 99.0.6 | Muga 11, 2026 |
| npm | briantreehttp:0.4.0 | Muga 11, 2026 |
| npm | kontrak awan:1.0.0 | Muga 12, 2026 |
| npm | @draftlab/db:0.16.1 | Muga 12, 2026 |
| npm | @uipath/uipath-python-bridge:1.0.1 | Muga 12, 2026 |
| npm | @uipath/piranti-kebijakan-aops:0.3.1 | Muga 12, 2026 |
| npm | @uipath/codedagent-tool:1.0.1 | Muga 12, 2026 |
| npm | @uipath/gov-tool:0.3.1 | Muga 12, 2026 |
| npm | @uipath/telemetri:0.0.7 | Muga 12, 2026 |
| npm | @uipath/admin-tool:0.1.1 | Muga 12, 2026 |
| npm | @uipath/codedapp-tool:1.0.1 | Muga 12, 2026 |
| npm | @uipath/insights-sdk:1.0.1 | Muga 12, 2026 |
| npm | @uipath/tool-workflowcompiler:0.0.12 | Muga 12, 2026 |
| npm | @uipath/project-packager:1.1.16 | Muga 12, 2026 |
| npm | @uipath/kebijakan-akses-sdk:0.3.1 | Muga 12, 2026 |
| npm | @uipath/alat-solusi-vertikal:1.0.1 | Muga 12, 2026 |
| npm | @uipath/integrationservice-sdk:1.0.2 | Muga 12, 2026 |
| npm | @uipath/piranti-kebijakan-akses:0.3.1 | Muga 12, 2026 |
| npm | @uipath/alat-katalog-sumberdaya:0.1.1 | Muga 12, 2026 |
| npm | @uipath/agen-tool:1.0.1 | Muga 12, 2026 |
| npm | @uipath/api-workflow-tool:1.0.1 | Muga 12, 2026 |
| npm | @uipath/tasks-tool:1.0.1 | Muga 12, 2026 |
| npm | @uipath/alat-solusi:1.0.1 | Muga 12, 2026 |
| npm | @uipath/vss:0.1.6 | Muga 12, 2026 |
| npm | @tallyui/komponen:1.0.1 | Muga 12, 2026 |
| npm | @squawk/flight-math:0.5.4 | Muga 12, 2026 |
| npm | @squawk/weather:0.5.6 | Muga 12, 2026 |
| npm | @mistralai/mistralai-gcp:1.7.1 | Muga 12, 2026 |
| npm | @mesadev/saguaro:0.4.22 | Muga 12, 2026 |
| npm | dpdgroupuk:0.0.1 | Muga 12, 2026 |
| npm | @cplace-paw-fe/cf-training-extended:2.0.4 | Muga 12, 2026 |
| npm | @jacobson1977/hp-setup:2.0.2 | Muga 14, 2026 |
| npm | @jacobson1977/hp-setup:2.0.5 | Muga 14, 2026 |
| npm | @jacobson1977/hp-setup:2.0.6 | Muga 14, 2026 |
| npm | @jacobson1977/hp-setup:2.0.7 | Muga 14, 2026 |
| npm | @jacobson1977/hp-setup:2.0.8 | Muga 14, 2026 |
| npm | @jacobson1977/hp-setup:2.0.9 | Muga 14, 2026 |
| npm | @jacobson1977/hp-setup:2.1.0 | Muga 14, 2026 |
| npm | persiyapan hp:4.0.1 | Muga 14, 2026 |
| npm | persiyapan hp:4.0.2 | Muga 14, 2026 |
| npm | persiyapan hp:4.1.0 | Muga 14, 2026 |
| npm | persiyapan hp:4.1.3 | Muga 14, 2026 |
| npm | persiyapan hp:4.1.4 | Muga 14, 2026 |
| npm | persiyapan hp:4.1.5 | Muga 14, 2026 |
| npm | persiyapan hp:4.1.6 | Muga 14, 2026 |
| npm | persiyapan hp:4.1.8 | Muga 14, 2026 |
| npm | persiyapan hp:4.1.19 | Muga 14, 2026 |
| npm | persiyapan hp:4.1.20 | Muga 14, 2026 |
| npm | persiyapan hp:4.2.0 | Muga 14, 2026 |
| npm | housecallpro:1.0.1 | Muga 14, 2026 |
| pypi | ai-spellcheckers:1.0.0 | Muga 14, 2026 |
| pypi | jangkrik-tg:0.3.6 | Muga 14, 2026 |
| npm | simpul-server-tes-smtp:99.2.1 | Muga 14, 2026 |
| npm | simpul-server-tes-smtp:99.2.2 | Muga 14, 2026 |
| npm | @lir-portal/komponen-web:2.0.4 | Muga 14, 2026 |
| npm | dotenvv-tool:1.0.1 | Muga 14, 2026 |
| npm | rimraf-utils:1.0.1 | Muga 14, 2026 |
| npm | alat-ekspres:1.0.0 | Muga 14, 2026 |
| npm | alat-ekspres:1.0.1 | Muga 14, 2026 |
| npm | express-utils:1.0.1 | Muga 14, 2026 |
| npm | @desain-sistem-coopeuch/web:999.0.4 | Muga 14, 2026 |
| npm | @desain-sistem-coopeuch/web:999.0.3 | Muga 14, 2026 |
| npm | @desain-sistem-coopeuch/web:999.0.2 | Muga 14, 2026 |
| pypi | eksekutor py:0.1.0 | Muga 15, 2026 |
| pypi | eksekutor py:0.1.2 | Muga 15, 2026 |
| npm | paket-hello-world-value-value-p:1.0.7 | Muga 15, 2026 |
| npm | paket-hello-world-value-value-p:1.0.10 | Muga 15, 2026 |
| npm | aksonenterprise: 1.0.0 | Muga 15, 2026 |
Minggu 1: Luwih saka 158 Paket Ditemokake
| Ekosistem | paket | tanggal |
|---|---|---|
| npm | @apple-pay-trust/dibatalake:99.0.3 | Muga 01, 2026 |
| npm | perpustakaan-keamanan-internal-apple-v99:100.0.1 | Muga 01, 2026 |
| npm | admin-token-fiat:99.1.1 | Muga 01, 2026 |
| npm | skrip-stablecoin-bintang:99.1.0 | Muga 01, 2026 |
| npm | simpul-abang-kontribusi-rubah-kontrol-admin:2.0.3 | Muga 01, 2026 |
| npm | simpul-abang-kontribusi-rubah-kontrol-admin:2.0.4 | Muga 01, 2026 |
| npm | simpul-abang-kontribusi-rubah-kontrol-admin:2.0.7 | Muga 01, 2026 |
| npm | navigator-jenggot-ireng:211.0.0 | Muga 01, 2026 |
| npm | navigator-jenggot-ireng:212.0.0 | Muga 01, 2026 |
| npm | navigator-jenggot-ireng:213.0.0 | Muga 01, 2026 |
| npm | navigator-jenggot-ireng:217.0.0 | Muga 01, 2026 |
| npm | navigator-jenggot-ireng:220.0.0 | Muga 01, 2026 |
| npm | navigator-jenggot-ireng:221.0.0 | Muga 01, 2026 |
| npm | navigator-jenggot-ireng:222.0.0 | Muga 01, 2026 |
| npm | sirene-ratapan:211.0.0 | Muga 01, 2026 |
| npm | sirene-ratapan:212.0.0 | Muga 01, 2026 |
| npm | sirene-ratapan:213.0.0 | Muga 01, 2026 |
| npm | mesiu-hantu:212.0.0 | Muga 01, 2026 |
| npm | mesiu-hantu:219.0.0 | Muga 01, 2026 |
| npm | streaming-codewhisperer:1.0.15 | Muga 02, 2026 |
| npm | shadxino:1.0.5 | Muga 02, 2026 |
| npm | kios-data-amazon-monorepo:1.0.10 | Muga 02, 2026 |
| npm | kode-claude-paling-apik:2.0.1 | Muga 03, 2026 |
| npm | apexpro:99.99.99 | Muga 03, 2026 |
| npm | puncak:99.99.99 | Muga 03, 2026 |
| npm | puncak:99.99.100 | Muga 03, 2026 |
| npm | apexpro:99.99.100 | Muga 03, 2026 |
| npm | simpul-env-resolve:1.0.7 | Muga 03, 2026 |
| npm | simpul-env-resolve:1.0.8 | Muga 03, 2026 |
| npm | @xp-utilities/web:99.0.0 | Muga 03, 2026 |
| npm | layanan-ngobrol-karo-ai-nextjs:99.9.9 | Muga 03, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.13 | Muga 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.14 | Muga 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.15 | Muga 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.16 | Muga 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.17 | Muga 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.19 | Muga 04, 2026 |
| npm | @sbt_gitverse/analytics-client:99.0.1 | Muga 04, 2026 |
| npm | @sbt_gitverse/analytics-client:99.0.4 | Muga 04, 2026 |
| npm | @sbt_gitverse/analytics-client:99.0.5 | Muga 04, 2026 |
| npm | @tochka-ui/foundation:99.0.2 | Muga 04, 2026 |
| npm | @tochka-ui/foundation:99.0.3 | Muga 04, 2026 |
| npm | @tochka-ui/foundation:99.0.4 | Muga 04, 2026 |
| npm | kl-b2c-ui-kit:99.0.1 | Muga 04, 2026 |
| npm | kl-b2c-ui-kit:99.0.2 | Muga 04, 2026 |
| npm | kl-b2c-ui-kit:99.0.3 | Muga 04, 2026 |
| npm | pi-exa-mcp:99.9.11 | Muga 04, 2026 |
| npm | pi-exa-mcp:99.9.12 | Muga 04, 2026 |
| npm | konfigurasi-manajer-rahasia-google-cloud-poc:99.9.26 | Muga 04, 2026 |
| npm | konfigurasi-manajer-rahasia-google-cloud-poc:99.9.33 | Muga 04, 2026 |
| npm | konfigurasi-manajer-rahasia-google-cloud-poc:99.9.34 | Muga 04, 2026 |
| npm | konfigurasi-manajer-rahasia-google-cloud-poc:99.9.35 | Muga 04, 2026 |
| npm | konfigurasi-manajer-rahasia-google-cloud-poc:99.9.37 | Muga 04, 2026 |
| npm | konfigurasi-manajer-rahasia-google-cloud-poc:99.9.38 | Muga 04, 2026 |
| npm | konfigurasi-manajer-rahasia-google-cloud-poc:99.9.51 | Muga 04, 2026 |
| npm | konfigurasi-manajer-rahasia-google-cloud-poc:99.9.53 | Muga 04, 2026 |
| npm | kreteg-pembayaran-paypal:99.9.9 | Muga 04, 2026 |
| npm | kreteg-pembayaran-paypal:100.1.1 | Muga 04, 2026 |
| npm | kreteg-pembayaran-paypal:100.1.4 | Muga 04, 2026 |
| npm | kreteg-pembayaran-paypal:100.1.6 | Muga 04, 2026 |
| npm | kreteg-pembayaran-paypal:100.1.9 | Muga 04, 2026 |
| npm | kreteg-pembayaran-paypal:100.2.8 | Muga 04, 2026 |
| npm | pengalaman-karyawan-microsoft:99.2.2 | Muga 05, 2026 |
| npm | tameng-ikan-ikan:0.1.0 | Muga 05, 2026 |
| npm | fanduel:100.5.0 | Muga 05, 2026 |
| npm | exiouss:1.0.6 | Muga 05, 2026 |
| npm | enterprise-otorisasi-gateway-inti:50.50.50 | Muga 06, 2026 |
| npm | @saif777/codemirror5:7.66.4 | Muga 06, 2026 |
| npm | @saif777/codemirror5:7.66.5 | Muga 06, 2026 |
| npm | layanan-bendera-fitur:2.0.1 | Muga 06, 2026 |
| npm | layanan-bendera-fitur:2.0.2 | Muga 06, 2026 |
| npm | layanan-bendera-fitur:2.0.3 | Muga 06, 2026 |
| npm | urut-btree:2.1.2 | Muga 06, 2026 |
| npm | inti-viem:1.0.0 | Muga 06, 2026 |
| npm | viem-utils-core:1.0.0 | Muga 06, 2026 |
| npm | inti-hardhat-utils:1.0.0 | Muga 06, 2026 |
| npm | veltrix:1.0.0 | Muga 06, 2026 |
| npm | evm-utils:1.0.0 | Muga 06, 2026 |
| npm | web3-utils-core:1.0.0 | Muga 06, 2026 |
| npm | utilitas-pengecoran:1.0.0 | Muga 06, 2026 |
| npm | aplikasi karbonite:99.9.0 | Muga 07, 2026 |
| npm | karbonit-internal:99.9.0 | Muga 07, 2026 |
| npm | money-badger-open-rpc:200.99.100 | Muga 07, 2026 |
| npm | 24712-pl5006:0.0.1 | Muga 07, 2026 |
| openvsx | eriklynd/json-tools:20.1.2 | Muga 07, 2026 |
| npm | invixco:1.0.4 | Muga 07, 2026 |
| npm | agen-kesehatan-sistem-menang:1.0.2 | Muga 08, 2026 |
| npm | win-env-setup:3.0.6 | Muga 08, 2026 |
| npm | agen-kesehatan-sistem-menang:1.0.3 | Muga 08, 2026 |
Amanake Rantai Pasokan Piranti Lunak Sampeyan Saka Kerentanan lan Kode Berbahaya
Serangan rantai pasokan piranti lunak ora maneh dadi ancaman teoretis. Paket jahat, malware sing sadar AI, serangan kebingungan dependensi, pencuri kredensial, lan piranti pangembang sing diracuni aktif nargetake piranti modern. SDLCs, CI/CD pipelines, lan lingkungan pangembangan sing dibantu AI.
Kanthi Deteksi Malware Awal Xygeni lan software supply chain security platform, organisasi bisa ngenali lan mblokir dependensi sing mbebayani sadurunge tekan workstation pangembang, sistem bangunan, utawa produksi pipelines.
Xygeni terus-terusan ngawasi ekosistem kayata npm, PyPI, VS Code, lan OpenVSX kanggo ndeteksi paket mbebayani, pola penerbitan sing mencurigakan, typosquatting, penyalahgunaan namespace, prilaku nyolong kredensial, lan ancaman rantai pasokan sing didorong AI kanthi wektu nyata. Temuan kasebut kanthi otomatis diprioritasake adhedhasar eksploitasi, jangkauan, lan dampak operasional supaya tim bisa fokus ing risiko sing pancen penting.
Saka paket npm sing mbebayani lan dependensi OSS sing disusupi nganti risiko kode sing digawe AI lan piranti pangembang sing diracuni, Xygeni mbantu tim keamanan lan teknik njaga visibilitas, kepercayaan, lan kontrol ing rantai pasokan piranti lunak modern.
Kanggo njelajah kampanye malware paling anyar lan paket jahat sing wis divalidasi sing ditemokake dening Tim Keamanan Xygeni, bukak situs web lengkap Ringkesan Kode Jahat.
Tetep aman. Tetep cepet. Tetep kendhali karo Xygeni.
