As every week, our malware detection systems scan thousands of new and updated packages across public registries. We confirmed 13 malicious packages between September 7 and 11, 2026, with the Baileys impersonation campaign still running, the first Composer cluster we have flagged, and two more cases of the version-inflation pattern used in dependency confusion.
cloud-baileys shipped two more versions (1.1.39 and 1.1.40), extending a campaign that has now produced new identities for several weeks straight. Composer appeared for the first time with three PHP packages published under form-handling names (slimfit/slimbase, slimfit/formbase, gcform/formhelper), a reminder that these operations follow developers rather than ecosystems. @umschool/platform was published at 999.0.0, the inflated version number typical of dependency confusion, and twilio-hackerone-poc-b8f21a shipped two versions under a name that reads as a proof of concept against a specific vendor’s internal package namespace.
Taip pat verta paminėti: darkglitch on PyPI shipped 1.4.4 and 1.4.5 within minutes of each other, and the registry itself confirmed syswatch and samaki after our earlier detection.
Ši savaitės apžvalga yra mūsų nuolatinės veiklos dalis. Kenkėjiško kodo santrauka, kur mes tikriname naujas grėsmes, kad padėtume „DevSecOps“ komandoms apsaugoti savo pipelines prieš atsirandant žalai.
| ekosistema | Paketas | Data |
|---|---|---|
| pypi | sistemos stebėjimas: 1.0.0 | Rugsėjis 07, 2026 |
| pypi | samaki:0.4.9 | Rugsėjis 07, 2026 |
| sukomponuoti | slimfit/slimbase:2.0 | Rugsėjis 07, 2026 |
| sukomponuoti | slimfit/formbase:1.2 | Rugsėjis 07, 2026 |
| sukomponuoti | gcform/formhelper:1.2 | Rugsėjis 07, 2026 |
| npm | debesies-baileys:1.1.39 | Rugsėjis 07, 2026 |
| npm | alloy-graphql:1.0.1 | Rugsėjis 08, 2026 |
| npm | @umschool/platform:999.0.0 | Rugsėjis 10, 2026 |
| npm | twilio-hackerone-poc-b8f21a:1.0.0 | Rugsėjis 10, 2026 |
| npm | twilio-hackerone-poc-b8f21a:1.0.1 | Rugsėjis 10, 2026 |
| npm | debesies-baileys:1.1.40 | Rugsėjis 11, 2026 |
| pypi | darkglitch:1.4.4 | Rugsėjis 11, 2026 |
| pypi | darkglitch:1.4.5 | Rugsėjis 11, 2026 |
Three Ecosystems, One Pattern: 13 Malicious Packages This Week
This week’s digest shows familiar operations widening their footprint: a campaign still publishing after weeks of detection, the first Composer cluster to appear here, and two packages using an inflated version number to win a resolution race.
cloud-baileys shipped 1.1.39 and 1.1.40 within days, consistent with an attacker who treats takedowns as a cost of operating rather than a reason to stop. Composer appeared for the first time with three PHP packages under form-handling names (slimfit/slimbase, slimfit/formbase, gcform/formhelper), a reminder that these operations follow developers, not ecosystems. And @umschool/platform was published at 999.0.0, the inflated version that exists for one reason: to outrank the internal package your teams actually wrote.
„Xygeni“ ankstyvas įspėjimas apie kenkėjiškas programas monitors npm, PyPI, Maven, Composer, OpenVSX, and other registries in real time, flagging threats at publication, before they reach a build and before an AI agent installs them autonomously. When a campaign resurfaces week after week, detection that only checks once is already behind.
Ksigenis Open Source Security platform gives DevSecOps teams the real-time detection and prioritization to stay ahead of coordinated supply chain pressure.
