ಪ್ರತಿ ವಾರ, ನಮ್ಮ ಮಾಲ್ವೇರ್ ಪತ್ತೆ ವ್ಯವಸ್ಥೆಗಳು npm ಮತ್ತು PyPI ನಂತಹ ಸಾರ್ವಜನಿಕ ನೋಂದಣಿಗಳಲ್ಲಿ ಸಾವಿರಾರು ಹೊಸ ಮತ್ತು ನವೀಕರಿಸಿದ ಪ್ಯಾಕೇಜ್ಗಳನ್ನು ಸ್ಕ್ಯಾನ್ ಮಾಡುತ್ತವೆ. ಈ ವಾರವೂ ಇದಕ್ಕೆ ಹೊರತಾಗಿರಲಿಲ್ಲ.
We confirmed over 90 malicious packages between June 26 and July 3, 2026, across npm and PyPI, with several campaigns continuing from previous weeks and new ones emerging.
ನಮ್ಮ nolimit-agent campaign continued publishing new versions (1.0.306, 1.0.315, 1.0.316), extending the Microsoft 365 device-code phishing framework we documented in detail in our DeviceDoor report. ದಿ anthropic-toolkit cluster was the dominant new campaign, with 20 versions confirmed on June 30 alone — directly targeting packages associated with Anthropic’s developer tooling. The cursed-modules family published over 15 versions between July 1 and July 2 across both standard and inflated version numbers (999.x), following the dependency confusion playbook. The date-fns-lite cluster (5 versions, July 2) continued the pattern of impersonating legitimate, widely-used utility packages.
The AI tooling targeting pattern established last week with ollama-helpers ಮತ್ತು openai-agents-helpers extended into this period with ai-explain, ai-sdk-helpers, ಮತ್ತು @langgraphjs/toolkit, all confirmed between June 28 and June 30. The @szc-ft/mcp-szcd-client package (versions 0.38.0 and 0.39.0, confirmed July 2) introduced a new pattern we are tracking as ಸ್ಕಿಲ್ಲೀಕ್: a credential decryptor hidden inside an MCP skill rather than an install hook, invisible to scanners that stop at postinstall. We published a full SkillLeak analysis here.
ಈ ಸಾಪ್ತಾಹಿಕ ಸ್ನ್ಯಾಪ್ಶಾಟ್ ನಮ್ಮ ನಡೆಯುತ್ತಿರುವ ದುರುದ್ದೇಶಪೂರಿತ ಕೋಡ್ ಡೈಜೆಸ್ಟ್, ಅಲ್ಲಿ ನಾವು ಹೊಸ ಬೆದರಿಕೆಗಳನ್ನು ಮೌಲ್ಯೀಕರಿಸುತ್ತೇವೆ ಮತ್ತು DevSecOps ತಂಡಗಳು ತಮ್ಮ ರಕ್ಷಣೆಗೆ ಸಹಾಯ ಮಾಡಲು ಕಾರ್ಯಸಾಧ್ಯ ಗುಪ್ತಚರವನ್ನು ಒದಗಿಸುತ್ತೇವೆ pipelineಹಾನಿ ಸಂಭವಿಸುವ ಮೊದಲು ರು. ಈ ವಾರ ನಾವು ಕಂಡುಕೊಂಡದ್ದನ್ನು ಮತ್ತು ಅದು ಏಕೆ ಮುಖ್ಯವಾಗಿದೆ ಎಂಬುದನ್ನು ವಿವರಿಸೋಣ.
90+ Packages. One Week. The Pipeline Is the Target.
This week’s digest reflects a shift in attacker focus, not just volume, but precision. Sustained version flooding, AI tooling clusters, MCP-layer credential theft, and dependency confusion attacks against internal monorepo namespaces. The campaigns are automated and continuous. A weekly scan is not a defense.
Xygeni Early Malware Warning monitors npm, PyPI, and other registries in real time, flagging threats at the moment of publication, before they reach a build, before an AI agent installs them autonomously, and before a SkillLeak-style payload has a chance to execute. When anthropic-toolkit publishes 20 versions in a single day or cursed-modules floods npm with version 999.x across two days, detection that runs after the fact is already too late.
ಕ್ಸಿಜೆನಿ Open Source Security platform gives DevSecOps teams the real-time detection and prioritization needed to stay ahead of coordinated supply chain pressure, so your pipelineನಿಮ್ಮ ತಂಡಗಳನ್ನು ನಿಧಾನಗೊಳಿಸದೆ ಸ್ವಚ್ಛವಾಗಿರಿ.
