Tongasoa eto amin'ny famoahana ny Xygeni Malicious Code Digest amin'ny volana Mey. Tamin'ity volana ity, nanohy nanara-maso ny fivoaran'ny fandrahonana amin'ny rojo famatsiana rindrambaiko manerana ny rejisitra fonosana ho an'ny daholobe, ny fitaovan'ny mpamorona rindrambaiko, ny fomba fiasa tohanan'ny AI, ary ny maoderina ny ekipa mpikaroka momba ny fiarovana anay. CI/CD tontolo iainana. Nandritra ny volana Mey, Xygeni dia namantatra sy nanamarina fonosana mampidi-doza an-jatony mikendry ny tontolo iainana npm, PyPI, VS Code, ary OpenVSX.
Saingy tsy momba ny habetsahana fotsiny ihany ny volana Mey. Volana iray izay nampifanarahan'ireo mpanafika ny fahaizany amin'ny tontolo iainana fampandrosoana AI, ny fiheverana ny fahatokisan'ny mpamorona, ary ny fampiasana ho azy. pipelines.
Anisan'ireo fanadihadiana niavaka indrindra navoakan'ny Ekipa Fiarovana Xygeni tamin'ity volana ity:
- JulesJacker, fampielezan-kevitra malware npm misy dingana maro izay mody miseho ho mpiasan'ny Google Jules AI mba hangalatra tahiry, fanararaotana CI/CD tontolo iainana, ary mikendry ny sandbox mamakafaka azy mihitsy aza. Nampiditra ireo "host-gated loaders" voaaro ny fampielezan-kevitra, forged
google-labs-jules[bot]commits, ny halatra metadata amin'ny rahona, ary ny fitsikilovana ataon'ny Kubernetes amin'ny fotodrafitrasa fanadihadiana mihitsy. - PhantomBot, fampielezan-kevitra npm ratsy fanahy izay manararaotra ny poketra sandoka, blockchain, ary fitaovana Web3 mba hangalarana fahazoan-dàlana, hanimba ny tontolo iainan'ny mpamorona, ary hikendry ny fomba fiasa mifandraika amin'ny crypto amin'ny alàlan'ny fanararaotana ny fiankinan-doha sy ny fanaterana entana miomana.
- Ekosistema npm ratsy amin'ny ambaratonga lehibe izay manararaotra ireo fitaovana TypeScript sandoka, fonosana misy lohahevitra AI, fisandohana fitaovana anatiny, tranomboky frontend, mpanampy rahona, ary rafitra mpamorona mba hamoronana tontolo misy dian-tanana, hanesorana ny fahazoan-dàlana, hametrahana persistensia, ary hanimba ny rafitra mpamorona.
- Onjan-javatra ratsy mitohy izay mampiasa ny fisafotofotoana momba ny fiankinan-doha, ny typosquatting, ny fanararaotana aorian'ny fametrahana, ny fisandohana amin'ny fitaovana AI, ny fampitomboana ny dikan-teny, ary ny fanararaotana ny namespace miverimberina natao hialana amin'ny heuristika fahatokisan'ny mpamorona ary hanimba ny maoderina. SDLC ny fomba fiasa alohan'ny hahitana azy.
- Ny nahitana ireo fampielezan-kevitra malware miampita sehatra toy ny
@jaggle/resizeobservesmpijirika clipboard, izay nisandoka ho fonosana ara-dalàna sady nampiasa ny persistence sy crypto-wallet clipboard substitution miorina amin'ny Python manerana ny rafitra Linux, macOS, ary Windows.
Nandritra ny volana, nahita fitomboan'ny fifanandrifian-javatra teo amin'ny fitaovana AI, ny tontolo iainana open-source, ary ny fanafihana amin'ny rojo famatsiana rindrambaiko ihany koa izahay. Nihamaro hatrany ireo mpandray anjara amin'ny fandrahonana nifantoka tamin'ny fizotran'ny fampandrosoana tohanan'ny AI, ny tontolo iainan'ny mpandraharaha, ny mpiara-miasa, ary ny fananganana rahona. pipelines ho ampahany amin'ny halatra fahazoan-dàlana sy ny fanitsakitsahana ny tahiry amin'ny ankapobeny.
Tsy tranga mitokana amin'ny fahadisoana tsotra fotsiny intsony ireo fanafihana ireo. Tafiditra amin'izany ny fampielezan-kevitra famoahana voarindra, ny fipoahan'ny dikan-teny mandeha ho azy, ny halatra famantarana rahona, CI/CD fanararaotana, fanomanana ny entana voaaro, fisorohana ny sandbox, ary teknika fanitsakitsahana maharitra izay natao manokana mba hifangaroana amin'ny tontolo iainana azo itokisana ho an'ny mpamorona.
Ity fanavaozana isam-bolana ity dia anisan'ny hetsika fikarohana mitohy ataon'ny Xygeni momba ny malware sy ny fandrahonana amin'ny rojo famatsiana, izay anamarinan'ny ekipanay tsy tapaka ireo fonosana manimba, anadihadiana ireo lamina fanafihana vao misondrotra, ary amoahana vaovao azo ampiharina mba hanampiana ny ekipa fiarovana, AppSec, ary DevSecOps hijanona ho lohalaharana amin'ny fivoaran'ny risika amin'ny rojo famatsiana.
Raha mila fanazavana feno momba ny fonosana ratsy rehetra, ny fampielezan-kevitra momba ny malware, ary ny famakafakana ny fandrahonana navoaka tamin'ity volana ity, dia jereo ny Famintinana feno momba ny Kaody Malicious tamin'ny volana Mey sy ny fikarohana mifandraika amin'izany avy amin'ny Ekipa Fiarovana Xygeni.
Herinandro 4: Fonosana maherin'ny 104 no hita
| tontolo iainana | Package | Date |
|---|---|---|
| npm | @gbrlxvii/ts-form-utils:4.6.0 | Enga anie 25, 2026 |
| npm | @gbrlxvii/ts-form-utils:4.7.0 | Enga anie 25, 2026 |
| npm | pi-ocr:0.2.0 | Enga anie 25, 2026 |
| npm | @jaggle/resizeobserves:1.0.11 | Enga anie 25, 2026 |
| npm | fivarotana-fnd:0.0.7 | Enga anie 25, 2026 |
| npm | @gbrlxvii/ts-project-lint:1.7.0 | Enga anie 25, 2026 |
| npm | @gbrlxvii/ts-project-lint:1.8.0 | Enga anie 25, 2026 |
| npm | famantarana-mpampiasa-rafitra-cli:7.0.0 | Enga anie 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.13 | Enga anie 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.12 | Enga anie 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.15 | Enga anie 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.14 | Enga anie 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.16 | Enga anie 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.19 | Enga anie 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.17 | Enga anie 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.18 | Enga anie 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.20 | Enga anie 26, 2026 |
| npm | doka-iraisam-pirenena:99.0.1 | Enga anie 26, 2026 |
| npm | tempo-layout:99.0.0 | Enga anie 26, 2026 |
| npm | tempo-layout:99.0.2 | Enga anie 26, 2026 |
| npm | itc-actors-api:99.0.0 | Enga anie 26, 2026 |
| npm | môdioly-nozaraina-walmart:99.0.1 | Enga anie 26, 2026 |
| npm | singa-wml:99.0.1 | Enga anie 26, 2026 |
| npm | sehatra-tempo:99.0.1 | Enga anie 26, 2026 |
| npm | wml-core:99.0.1 | Enga anie 26, 2026 |
| npm | @izumiswap/sdk:3.0.3 | Enga anie 26, 2026 |
| npm | @izumiswap/sdk:3.0.4 | Enga anie 26, 2026 |
| npm | @izumiswap/sdk:3.0.5 | Enga anie 26, 2026 |
| npm | json-to-simple-graphql-schema:1.0.0 | Enga anie 26, 2026 |
| npm | reactive-cdk-app:1.0.1 | Enga anie 27, 2026 |
| npm | mmt-static:1.0.0 | Enga anie 27, 2026 |
| npm | reactive-cdk-app:1.0.4 | Enga anie 27, 2026 |
| npm | cdk-sagemaker-tsyebook-workflow:1.0.3 | Enga anie 27, 2026 |
| npm | discovery-build:1.0.0 | Enga anie 27, 2026 |
| pypi | worldofkanga:1.0.4 | Enga anie 27, 2026 |
| npm | forge-jsxy:1.0.92 | Enga anie 27, 2026 |
| npm | @gs-select/fampiharana-tahiry-mpanjifa:99.0.0 | Enga anie 27, 2026 |
| npm | forge-jsxy:1.0.105 | Enga anie 27, 2026 |
| npm | forge-jsxy:1.0.107 | Enga anie 27, 2026 |
| npm | forge-jsxy:1.0.108 | Enga anie 27, 2026 |
| npm | fanitsiana-mse-fanamarinana-ui:99.0.1 | Enga anie 28, 2026 |
| npm | kaody-fanontana:99.0.1 | Enga anie 28, 2026 |
| npm | singa-fitaovana-mse:99.99.100 | Enga anie 28, 2026 |
| npm | forge-jsxy:1.0.120 | Enga anie 28, 2026 |
| npm | @gbrlxvi/ts-form-utils:1.0.0 | Enga anie 29, 2026 |
| vscode | mpanampy-mpamorona-rudranex:1.0.1 | Enga anie 29, 2026 |
| npm | nemo-reporter:1.8.2 | Enga anie 29, 2026 |
| npm | @qlab/ui:2.0.5 | Enga anie 29, 2026 |
| npm | forge-jsxy:1.0.121 | Enga anie 29, 2026 |
| npm | @qlab/ui:2.0.6 | Enga anie 29, 2026 |
| npm | @qlab/component-intelligence:2.0.6 | Enga anie 29, 2026 |
| npm | fametrahana motera fikarohana:1.0.9106 | Enga anie 29, 2026 |
| npm | fitaovana fametrahana opensearch:1.0.9107 | Enga anie 29, 2026 |
| npm | @0xlr/vercel-analytics:999.0.0 | Enga anie 29, 2026 |
| npm | @0xlr/stripe-frontend:999.0.0 | Enga anie 29, 2026 |
| npm | @0xlr/stripe-checkout-js:999.0.0 | Enga anie 29, 2026 |
| npm | @0xlr/sentry-web:999.0.0 | Enga anie 29, 2026 |
| npm | @0xlr/clerk-auth:999.0.0 | Enga anie 29, 2026 |
| npm | @0xlr/supabase-db:999.0.0 | Enga anie 29, 2026 |
| npm | @0xlr/prisma-client-js:999.0.0 | Enga anie 29, 2026 |
| npm | @flexspec/cli:0.3.1-dev.26612027722 | Enga anie 29, 2026 |
| npm | @cloudplatform-single-spa/fitantanana:99.99.100 | Enga anie 30, 2026 |
| npm | @cloudplatform-single-spa/svp-s3-storage:99.99.100 | Enga anie 30, 2026 |
| npm | @maximvs1538/os-npm:99.0.0 | Enga anie 30, 2026 |
| npm | @fidirana-mora/lalana-fipetrahana:99.9.5 | Enga anie 30, 2026 |
| npm | @fidirana-mora/fisoratana-anarana-ivelany-fop-navigator:99.9.5 | Enga anie 30, 2026 |
| npm | @fidirana-mora/lalana:99.9.5 | Enga anie 30, 2026 |
| npm | cms-github:4.2.4 | Enga anie 30, 2026 |
| npm | @t-in-one/form_product_token:5.7.1 | Enga anie 30, 2026 |
| npm | @capibar.chat/ui-kit:99.5.7 | Enga anie 30, 2026 |
| npm | cms-helpgit:4.2.6 | Enga anie 30, 2026 |
| npm | cms-helpgit:4.2.8 | Enga anie 30, 2026 |
| vscode | xampp-manager:5.1.3 | Enga anie 30, 2026 |
| npm | @chat-template/auth:1.0.0 | Enga anie 31, 2026 |
| npm | cms-storehub:1.3.4 | Enga anie 31, 2026 |
| npm | cms-storehub:1.3.5 | Enga anie 31, 2026 |
| npm | tetikady-toerana-antsinjarany-frontend:1.1.1 | Enga anie 31, 2026 |
| npm | tetikady-toerana-antsinjarany-frontend:1.1.2 | Enga anie 31, 2026 |
| npm | cms-storehub:1.3.6 | Enga anie 31, 2026 |
| pypi | simtooreal-cli:0.3.0 | Jun 01, 2026 |
| npm | conversa-sdk:2.0.2 | Jun 01, 2026 |
| npm | veltrix:9.0.0 | Jun 01, 2026 |
| npm | jingmeideshishi:1.0.4 | Jun 01, 2026 |
| npm | @tse-digital/core:99.0.0 | Jun 01, 2026 |
| npm | @telenor-se/core:99.0.0 | Jun 01, 2026 |
| npm | @ownit/core:99.0.0 | Jun 01, 2026 |
| npm | jingmeideshishi:1.0.5 | Jun 01, 2026 |
| npm | antontan-taratasy momba ny marary:75.0.0 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.69 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.68 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.82 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.80 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.81 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.83 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.3 | Jun 01, 2026 |
| npm | veltrix:9.0.1 | Jun 01, 2026 |
| npm | @emcd-vue/auth:6.4.9 | Jun 01, 2026 |
| npm | @emcd-vue/b2b-pay-form:5.7.4 | Jun 01, 2026 |
Herinandro 3: Fonosana maherin'ny 106 no hita
| tontolo iainana | Package | Date |
|---|---|---|
| npm | erslove:1.22.12 | Enga anie 16, 2026 |
| npm | dit-envv:17.4.2 | Enga anie 16, 2026 |
| npm | briantreehttp:0.4.0 | Enga anie 16, 2026 |
| npm | cheaty-sync-bot:1.0.0 | Enga anie 16, 2026 |
| openvsx | bingcha/bcai-fitaovana:4.0.35 | Enga anie 16, 2026 |
| npm | sandan'ny fonosana-hello-world-value-p:1.0.11 | Enga anie 16, 2026 |
| npm | sandan'ny fonosana-hello-world-value-p:1.0.8 | Enga anie 16, 2026 |
| npm | sandan'ny fonosana-hello-world-value-p:1.0.9 | Enga anie 16, 2026 |
| npm | sandan'ny fonosana-hello-world-value-p:1.0.12 | Enga anie 16, 2026 |
| npm | axois-utils:1.0.6 | Enga anie 16, 2026 |
| npm | axois-utils:1.0.4 | Enga anie 16, 2026 |
| npm | venturo-playwright-core:1.0.8 | Enga anie 16, 2026 |
| npm | tsaoka-tempalte:1.0.16 | Enga anie 16, 2026 |
| npm | tsaoka-tempalte:1.0.14 | Enga anie 16, 2026 |
| npm | tsaoka-tempalte:1.0.20 | Enga anie 17, 2026 |
| npm | tsaoka-tempalte:1.0.19 | Enga anie 17, 2026 |
| npm | axois-utils:1.0.9 | Enga anie 17, 2026 |
| npm | @rocketreach/rr-components:9999.0.0 | Enga anie 17, 2026 |
| npm | @cplace-paw-fe/cf-training-extended:2.0.4 | Enga anie 18, 2026 |
| npm | smtp-test-server-node:99.2.1 | Enga anie 18, 2026 |
| npm | smtp-test-server-node:99.2.2 | Enga anie 18, 2026 |
| npm | @lir-portal/web-components:2.0.4 | Enga anie 18, 2026 |
| npm | @zentrafinance/contracts:1.0.3 | Enga anie 18, 2026 |
| npm | @zentrafinance/protocol-config:1.0.3 | Enga anie 18, 2026 |
| npm | @zentrafinance/sdk:1.0.3 | Enga anie 18, 2026 |
| npm | @zentrafinance/karazana:1.0.3 | Enga anie 18, 2026 |
| npm | @zentrafinance/karazana:1.0.5 | Enga anie 18, 2026 |
| npm | @zentrafinance/protocol-config:1.0.6 | Enga anie 18, 2026 |
| npm | @zentrafinance/sdk:1.0.6 | Enga anie 18, 2026 |
| npm | @zentrafinance/karazana:1.0.7 | Enga anie 18, 2026 |
| npm | clementine-sdk:2.0.0 | Enga anie 18, 2026 |
| npm | citrea-utils:2.0.0 | Enga anie 18, 2026 |
| npm | @zentrafinance/protocol-config:2.0.1 | Enga anie 18, 2026 |
| npm | @zentrafinance/sdk:2.0.0 | Enga anie 18, 2026 |
| npm | @zentrafinance/karazana:2.0.1 | Enga anie 18, 2026 |
| npm | @zentrafinance/karazana:2.0.0 | Enga anie 18, 2026 |
| npm | bui-react-10hooks: 99.0.0 | Enga anie 18, 2026 |
| npm | singa-10-bui-react:99.0.0 | Enga anie 18, 2026 |
| npm | @deadcode09284814/axios-util:1.0.1 | Enga anie 18, 2026 |
| npm | @deadcode09284814/axios-util:1.0.0 | Enga anie 18, 2026 |
| npm | loko-fomba-fampiasana:1.0.7 | Enga anie 18, 2026 |
| npm | node-env-resolve:1.2.0 | Enga anie 18, 2026 |
| npm | @easytipsportal/node-helper:1.0.1 | Enga anie 18, 2026 |
| npm | @zentrafinance/contracts:2.0.2 | Enga anie 18, 2026 |
| npm | citrea-sdk:2.0.2 | Enga anie 18, 2026 |
| npm | clementine-sdk:2.0.2 | Enga anie 18, 2026 |
| npm | citrea-bridge:2.0.2 | Enga anie 18, 2026 |
| npm | citrea-utils:2.0.2 | Enga anie 18, 2026 |
| npm | @zentrafinance/karazana:2.0.2 | Enga anie 18, 2026 |
| npm | apexomni-node:1.0.0 | Enga anie 19, 2026 |
| npm | apex-trading:1.0.0 | Enga anie 19, 2026 |
| npm | apex-trading:1.0.1 | Enga anie 19, 2026 |
| npm | apex-connector:1.0.4 | Enga anie 19, 2026 |
| npm | apexpro-node:1.0.2 | Enga anie 19, 2026 |
| npm | apex-connector:1.0.3 | Enga anie 19, 2026 |
| npm | apexomni-node:1.0.2 | Enga anie 19, 2026 |
| npm | apex-trading:1.0.2 | Enga anie 19, 2026 |
| npm | apexpro-node:1.0.3 | Enga anie 19, 2026 |
| npm | forge-jsxy:1.0.81 | Enga anie 19, 2026 |
| npm | forge-jsxy:1.0.90 | Enga anie 19, 2026 |
| npm | fonosana antsy fijinjana:0.2.1 | Enga anie 20, 2026 |
| npm | @doctolib-apps/serivisy-natiora-natokana:99.99.99 | Enga anie 21, 2026 |
| npm | @doctolib-apps/serivisy-natiora-natokana:1.0.0 | Enga anie 21, 2026 |
| npm | @doctolib-apps/serivisy-natiora-natokana:1.0.1 | Enga anie 21, 2026 |
| pypi | kanga-hack:1.0.4 | Enga anie 21, 2026 |
| pypi | libhmac:0.8.28.1 | Enga anie 21, 2026 |
| npm | @limebike/supreme-data-grid:85.14.44 | Enga anie 21, 2026 |
| npm | @limebike/supreme-date-pickers:85.14.44 | Enga anie 21, 2026 |
| npm | @limebike/supreme-data-grid:85.14.48 | Enga anie 21, 2026 |
| pypi | ai-prishtina-agentic-kag:0.1.0 | Enga anie 21, 2026 |
| npm | hehehe:1.0.7 | Enga anie 21, 2026 |
| npm | defi-threat-scanner:2.1.2 | Enga anie 22, 2026 |
| npm | mpanadihady-fanalahidy-fametrahana:0.7.3 | Enga anie 22, 2026 |
| npm | eth-wallet-sentinel:1.0.9 | Enga anie 22, 2026 |
| npm | web3-secrets-detector:1.2.6 | Enga anie 22, 2026 |
| npm | fiarovana fametrahana-mafy:0.4.4 | Enga anie 22, 2026 |
| npm | fanamarinana-fiarovana-mnemonic:0.5.2 | Enga anie 22, 2026 |
| npm | scanner-fahazoan-dàlana-crypto:2.0.2 | Enga anie 22, 2026 |
| npm | mpanamarina-lakile-rojo:0.2.3 | Enga anie 22, 2026 |
| npm | mpanamarina-lakile-rojo:0.2.4 | Enga anie 22, 2026 |
| npm | defi-env-auditor:0.3.3 | Enga anie 22, 2026 |
| npm | mpanadihady-fanalahidy-fametrahana:1.8.2 | Enga anie 22, 2026 |
| npm | defi-env-auditor:1.4.2 | Enga anie 22, 2026 |
| npm | fiarovana fametrahana-mafy:1.5.2 | Enga anie 22, 2026 |
| npm | mpanamarina-fiarovana-an-kitapom-bola:2.1.3 | Enga anie 22, 2026 |
| npm | fiarovana fametrahana-mafy:1.5.3 | Enga anie 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.1 | Enga anie 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.3 | Enga anie 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.2 | Enga anie 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.5 | Enga anie 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.6 | Enga anie 22, 2026 |
| npm | defi-threat-scanner:3.2.5 | Enga anie 22, 2026 |
| npm | defi-threat-scanner:3.2.4 | Enga anie 22, 2026 |
| npm | defi-env-auditor:1.4.9 | Enga anie 22, 2026 |
| npm | web3-secrets-detector:2.3.6 | Enga anie 22, 2026 |
| npm | mpanamarina-fiarovana-an-kitapom-bola:2.1.6 | Enga anie 22, 2026 |
| npm | fanamarinana-fiarovana-mnemonic:4.0.0 | Enga anie 22, 2026 |
| npm | eth-wallet-sentinel:4.0.0 | Enga anie 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.7 | Enga anie 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.8 | Enga anie 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.4 | Enga anie 22, 2026 |
Herinandro 2: Fonosana maherin'ny 95 no hita
| tontolo iainana | Package | Date |
|---|---|---|
| npm | win-env-setup:3.0.5 | Enga anie 11, 2026 |
| npm | kisary-famaliana-svgs:1.0.1 | Enga anie 11, 2026 |
| npm | money-badger-open-rpc:201.99.100 | Enga anie 11, 2026 |
| npm | mpizara-tsy-mizara-tontolo-utils:1.0.0 | Enga anie 11, 2026 |
| npm | mpizara-tsy-mizara-tontolo-utils:1.0.2 | Enga anie 11, 2026 |
| npm | mpizara-tsy-mizara-tontolo-utils:1.0.3 | Enga anie 11, 2026 |
| npm | sahrbrucecode32:1.0.0 | Enga anie 11, 2026 |
| npm | claw_messenger:0.0.71 | Enga anie 11, 2026 |
| npm | @gbrlxvii/ts-form-utils:2.7.0 | Enga anie 11, 2026 |
| npm | fonosana aorian'ny fividianana:99.9.19 | Enga anie 11, 2026 |
| npm | fonosana aorian'ny fividianana:99.9.26 | Enga anie 11, 2026 |
| npm | fonosana aorian'ny fividianana:100.0.1 | Enga anie 11, 2026 |
| npm | fonosana aorian'ny fividianana:101.0.3 | Enga anie 11, 2026 |
| npm | rsflows-pexml:99.9.15 | Enga anie 11, 2026 |
| npm | rsflows-pexml:99.9.20 | Enga anie 11, 2026 |
| npm | fonosana aorian'ny fividianana:102.0.3 | Enga anie 11, 2026 |
| npm | rsflows-pexml:99.9.25 | Enga anie 11, 2026 |
| npm | fonosana aorian'ny fividianana:1.99.0 | Enga anie 11, 2026 |
| npm | surf miadana:10.0.0 | Enga anie 11, 2026 |
| npm | erslove:1.22.12 | Enga anie 11, 2026 |
| npm | dit-envv:17.4.2 | Enga anie 11, 2026 |
| npm | hehehe:1.0.4 | Enga anie 11, 2026 |
| npm | @gbrlxvii/ts-form-utils:3.7.0 | Enga anie 11, 2026 |
| npm | claw_messenger:0.0.74 | Enga anie 11, 2026 |
| openvsx | whatwedo/twig:1.2.7 | Enga anie 11, 2026 |
| openvsx | george-alisson/html-preview-vscode:1.2.7 | Enga anie 11, 2026 |
| openvsx | sohibe/java-generate-setters-getters:9.0.2 | Enga anie 11, 2026 |
| npm | mpivarotra:99.0.6 | Enga anie 11, 2026 |
| npm | briantreehttp:0.4.0 | Enga anie 11, 2026 |
| npm | fifanarahana amin'ny mitataovovonana:1.0.0 | Enga anie 12, 2026 |
| npm | @draftlab/db:0.16.1 | Enga anie 12, 2026 |
| npm | @uipath/uipath-python-bridge:1.0.1 | Enga anie 12, 2026 |
| npm | @uipath/fitaovana-politika-aops:0.3.1 | Enga anie 12, 2026 |
| npm | @uipath/codedagent-tool:1.0.1 | Enga anie 12, 2026 |
| npm | @uipath/gov-tool:0.3.1 | Enga anie 12, 2026 |
| npm | @uipath/telemetry:0.0.7 | Enga anie 12, 2026 |
| npm | @uipath/admin-tool:0.1.1 | Enga anie 12, 2026 |
| npm | @uipath/codedapp-tool:1.0.1 | Enga anie 12, 2026 |
| npm | @uipath/insights-sdk:1.0.1 | Enga anie 12, 2026 |
| npm | @uipath/tool-workflowcompiler:0.0.12 | Enga anie 12, 2026 |
| npm | @uipath/mpanamboatra-tetikasa:1.1.16 | Enga anie 12, 2026 |
| npm | @uipath/politika-fidirana-sdk:0.3.1 | Enga anie 12, 2026 |
| npm | @uipath/fitaovana-vahaolana-mitsangana:1.0.1 | Enga anie 12, 2026 |
| npm | @uipath/integrationservice-sdk:1.0.2 | Enga anie 12, 2026 |
| npm | @uipath/fitaovana-politika-azo-diravina:0.3.1 | Enga anie 12, 2026 |
| npm | @uipath/resourcecatalog-tool:0.1.1 | Enga anie 12, 2026 |
| npm | @uipath/fitaovana-agent:1.0.1 | Enga anie 12, 2026 |
| npm | @uipath/api-workflow-tool:1.0.1 | Enga anie 12, 2026 |
| npm | @uipath/tasks-tool:1.0.1 | Enga anie 12, 2026 |
| npm | @uipath/fitaovana-vahaolana:1.0.1 | Enga anie 12, 2026 |
| npm | @uipath/vss:0.1.6 | Enga anie 12, 2026 |
| npm | @tallyui/singa:1.0.1 | Enga anie 12, 2026 |
| npm | @squawk/flight-math:0.5.4 | Enga anie 12, 2026 |
| npm | @squawk/toetr'andro:0.5.6 | Enga anie 12, 2026 |
| npm | @mistralai/mistralai-gcp:1.7.1 | Enga anie 12, 2026 |
| npm | @mesadev/saguaro:0.4.22 | Enga anie 12, 2026 |
| npm | dpdgroupuk:0.0.1 | Enga anie 12, 2026 |
| npm | @cplace-paw-fe/cf-training-extended:2.0.4 | Enga anie 12, 2026 |
| npm | @jacobson1977/hp-setup:2.0.2 | Enga anie 14, 2026 |
| npm | @jacobson1977/hp-setup:2.0.5 | Enga anie 14, 2026 |
| npm | @jacobson1977/hp-setup:2.0.6 | Enga anie 14, 2026 |
| npm | @jacobson1977/hp-setup:2.0.7 | Enga anie 14, 2026 |
| npm | @jacobson1977/hp-setup:2.0.8 | Enga anie 14, 2026 |
| npm | @jacobson1977/hp-setup:2.0.9 | Enga anie 14, 2026 |
| npm | @jacobson1977/hp-setup:2.1.0 | Enga anie 14, 2026 |
| npm | hpsetup:4.0.1 | Enga anie 14, 2026 |
| npm | hpsetup:4.0.2 | Enga anie 14, 2026 |
| npm | hpsetup:4.1.0 | Enga anie 14, 2026 |
| npm | hpsetup:4.1.3 | Enga anie 14, 2026 |
| npm | hpsetup:4.1.4 | Enga anie 14, 2026 |
| npm | hpsetup:4.1.5 | Enga anie 14, 2026 |
| npm | hpsetup:4.1.6 | Enga anie 14, 2026 |
| npm | hpsetup:4.1.8 | Enga anie 14, 2026 |
| npm | hpsetup:4.1.19 | Enga anie 14, 2026 |
| npm | hpsetup:4.1.20 | Enga anie 14, 2026 |
| npm | hpsetup:4.2.0 | Enga anie 14, 2026 |
| npm | housecallpro:1.0.1 | Enga anie 14, 2026 |
| pypi | ai-spellcheckers:1.0.0 | Enga anie 14, 2026 |
| pypi | cicada-tg:0.3.6 | Enga anie 14, 2026 |
| npm | smtp-test-server-node:99.2.1 | Enga anie 14, 2026 |
| npm | smtp-test-server-node:99.2.2 | Enga anie 14, 2026 |
| npm | @lir-portal/web-components:2.0.4 | Enga anie 14, 2026 |
| npm | dotenvv-tool:1.0.1 | Enga anie 14, 2026 |
| npm | rimraf-utils:1.0.1 | Enga anie 14, 2026 |
| npm | express-tool:1.0.0 | Enga anie 14, 2026 |
| npm | express-tool:1.0.1 | Enga anie 14, 2026 |
| npm | express-utils:1.0.1 | Enga anie 14, 2026 |
| npm | @design-system-coopeuch/tranonkala:999.0.4 | Enga anie 14, 2026 |
| npm | @design-system-coopeuch/tranonkala:999.0.3 | Enga anie 14, 2026 |
| npm | @design-system-coopeuch/tranonkala:999.0.2 | Enga anie 14, 2026 |
| pypi | pyexecutorsme:0.1.0 | Enga anie 15, 2026 |
| pypi | pyexecutorsme:0.1.2 | Enga anie 15, 2026 |
| npm | sandan'ny fonosana-hello-world-value-p:1.0.7 | Enga anie 15, 2026 |
| npm | sandan'ny fonosana-hello-world-value-p:1.0.10 | Enga anie 15, 2026 |
| npm | axon-enterprise: 1.0.0 | Enga anie 15, 2026 |
Herinandro 1: Fonosana maherin'ny 158 no hita
| tontolo iainana | Package | Date |
|---|---|---|
| npm | @apple-pay-trust/fanafoanana:99.0.3 | Enga anie 01, 2026 |
| npm | tranomboky-fiarovana-anatiny-apple-v99:100.0.1 | Enga anie 01, 2026 |
| npm | fiat-token-admin:99.1.1 | Enga anie 01, 2026 |
| npm | stellar-stablecoin-scripts:99.1.0 | Enga anie 01, 2026 |
| npm | node-red-contrib-fox-control-admin:2.0.3 | Enga anie 01, 2026 |
| npm | node-red-contrib-fox-control-admin:2.0.4 | Enga anie 01, 2026 |
| npm | node-red-contrib-fox-control-admin:2.0.7 | Enga anie 01, 2026 |
| npm | blackbeards-navigator:211.0.0 | Enga anie 01, 2026 |
| npm | blackbeards-navigator:212.0.0 | Enga anie 01, 2026 |
| npm | blackbeards-navigator:213.0.0 | Enga anie 01, 2026 |
| npm | blackbeards-navigator:217.0.0 | Enga anie 01, 2026 |
| npm | blackbeards-navigator:220.0.0 | Enga anie 01, 2026 |
| npm | blackbeards-navigator:221.0.0 | Enga anie 01, 2026 |
| npm | blackbeards-navigator:222.0.0 | Enga anie 01, 2026 |
| npm | siren-fitarainana:211.0.0 | Enga anie 01, 2026 |
| npm | siren-fitarainana:212.0.0 | Enga anie 01, 2026 |
| npm | siren-fitarainana:213.0.0 | Enga anie 01, 2026 |
| npm | gunpowder-ghost:212.0.0 | Enga anie 01, 2026 |
| npm | gunpowder-ghost:219.0.0 | Enga anie 01, 2026 |
| npm | codewhisperer-streaming:1.0.15 | Enga anie 02, 2026 |
| npm | shadxino:1.0.5 | Enga anie 02, 2026 |
| npm | kiosk-data-amazon-monorepo:1.0.10 | Enga anie 02, 2026 |
| npm | claude-code-tsara indrindra:2.0.1 | Enga anie 03, 2026 |
| npm | apexpro:99.99.99 | Enga anie 03, 2026 |
| npm | apexomni:99.99.99 | Enga anie 03, 2026 |
| npm | apexomni:99.99.100 | Enga anie 03, 2026 |
| npm | apexpro:99.99.100 | Enga anie 03, 2026 |
| npm | node-env-resolve:1.0.7 | Enga anie 03, 2026 |
| npm | node-env-resolve:1.0.8 | Enga anie 03, 2026 |
| npm | @xp-utilities/web:99.0.0 | Enga anie 03, 2026 |
| npm | nextjs-miresaka-miaraka-amin'ny-serivisy-ai:99.9.9 | Enga anie 03, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.13 | Enga anie 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.14 | Enga anie 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.15 | Enga anie 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.16 | Enga anie 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.17 | Enga anie 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.19 | Enga anie 04, 2026 |
| npm | @sbt_gitverse/analytics-client:99.0.1 | Enga anie 04, 2026 |
| npm | @sbt_gitverse/analytics-client:99.0.4 | Enga anie 04, 2026 |
| npm | @sbt_gitverse/analytics-client:99.0.5 | Enga anie 04, 2026 |
| npm | @tochka-ui/fondation:99.0.2 | Enga anie 04, 2026 |
| npm | @tochka-ui/fondation:99.0.3 | Enga anie 04, 2026 |
| npm | @tochka-ui/fondation:99.0.4 | Enga anie 04, 2026 |
| npm | kl-b2c-ui-kit:99.0.1 | Enga anie 04, 2026 |
| npm | kl-b2c-ui-kit:99.0.2 | Enga anie 04, 2026 |
| npm | kl-b2c-ui-kit:99.0.3 | Enga anie 04, 2026 |
| npm | pi-exa-mcp:99.9.11 | Enga anie 04, 2026 |
| npm | pi-exa-mcp:99.9.12 | Enga anie 04, 2026 |
| npm | google-cloud-secret-manager-config-poc:99.9.26 | Enga anie 04, 2026 |
| npm | google-cloud-secret-manager-config-poc:99.9.33 | Enga anie 04, 2026 |
| npm | google-cloud-secret-manager-config-poc:99.9.34 | Enga anie 04, 2026 |
| npm | google-cloud-secret-manager-config-poc:99.9.35 | Enga anie 04, 2026 |
| npm | google-cloud-secret-manager-config-poc:99.9.37 | Enga anie 04, 2026 |
| npm | google-cloud-secret-manager-config-poc:99.9.38 | Enga anie 04, 2026 |
| npm | google-cloud-secret-manager-config-poc:99.9.51 | Enga anie 04, 2026 |
| npm | google-cloud-secret-manager-config-poc:99.9.53 | Enga anie 04, 2026 |
| npm | tetezana-fandoavam-bola-paypal:99.9.9 | Enga anie 04, 2026 |
| npm | tetezana-fandoavam-bola-paypal:100.1.1 | Enga anie 04, 2026 |
| npm | tetezana-fandoavam-bola-paypal:100.1.4 | Enga anie 04, 2026 |
| npm | tetezana-fandoavam-bola-paypal:100.1.6 | Enga anie 04, 2026 |
| npm | tetezana-fandoavam-bola-paypal:100.1.9 | Enga anie 04, 2026 |
| npm | tetezana-fandoavam-bola-paypal:100.2.8 | Enga anie 04, 2026 |
| npm | traikefan'ny mpiasa Microsoft:99.2.2 | Enga anie 05, 2026 |
| npm | ampinga-karpa:0.1.0 | Enga anie 05, 2026 |
| npm | fanduel:100.5.0 | Enga anie 05, 2026 |
| npm | exiouss:1.0.6 | Enga anie 05, 2026 |
| npm | enterprise-auth-gateway-core:50.50.50 | Enga anie 06, 2026 |
| npm | @saif777/codemirror5:7.66.4 | Enga anie 06, 2026 |
| npm | @saif777/codemirror5:7.66.5 | Enga anie 06, 2026 |
| npm | serivisy-saina-endri-javatra:2.0.1 | Enga anie 06, 2026 |
| npm | serivisy-saina-endri-javatra:2.0.2 | Enga anie 06, 2026 |
| npm | serivisy-saina-endri-javatra:2.0.3 | Enga anie 06, 2026 |
| npm | sort-btree:2.1.2 | Enga anie 06, 2026 |
| npm | viem-core:1.0.0 | Enga anie 06, 2026 |
| npm | viem-utils-core:1.0.0 | Enga anie 06, 2026 |
| npm | hardhat-core-utils:1.0.0 | Enga anie 06, 2026 |
| npm | veltrix:1.0.0 | Enga anie 06, 2026 |
| npm | evm-utils:1.0.0 | Enga anie 06, 2026 |
| npm | web3-utils-core:1.0.0 | Enga anie 06, 2026 |
| npm | famokarana-fitaovana:1.0.0 | Enga anie 06, 2026 |
| npm | fampiharana karbônina:99.9.0 | Enga anie 07, 2026 |
| npm | karbonita-anatiny:99.9.0 | Enga anie 07, 2026 |
| npm | money-badger-open-rpc:200.99.100 | Enga anie 07, 2026 |
| npm | 24712-pl5006:0.0.1 | Enga anie 07, 2026 |
| openvsx | eriklynd/json-tools:20.1.2 | Enga anie 07, 2026 |
| npm | invixco:1.0.4 | Enga anie 07, 2026 |
| npm | win-sys-health-agent:1.0.2 | Enga anie 08, 2026 |
| npm | win-env-setup:3.0.6 | Enga anie 08, 2026 |
| npm | win-sys-health-agent:1.0.3 | Enga anie 08, 2026 |
Arovy ny rojo famatsiana rindrambaiko amin'ny fahalemena sy ny kaody ratsy
Tsy fandrahonana ara-teoria intsony ny fanafihana amin'ny rojo famatsiana rindrambaiko. Ireo fonosana ratsy, ireo malware mahafantatra ny AI, ireo fanafihana mampisafotofoto ny fiankinan-doha, ireo mpangalatra fahazoan-dàlana, ary ireo fitaovana mpamorona rindrambaiko voapoizina dia mikendry mavitrika ireo fitaovana maoderina. SDLCs, CI/CD pipelines, ary tontolo iainana fampandrosoana tohanan'ny AI.
Miaraka amin'ny famantarana mialoha ny malware an'ny Xygeni sy software supply chain security sehatra, afaka mamantatra sy manakana ny fiankinan-doha ratsy ireo fikambanana alohan'ny hahatongavany any amin'ny toeram-piasan'ny mpamorona, rafitra fananganana, na famokarana pipelines.
Manara-maso tsy tapaka ny tontolo iainana toy ny npm, PyPI, VS Code, ary OpenVSX ny Xygeni mba hamantarana ireo fonosana mampidi-doza, ireo lamina famoahana mampiahiahy, ny tsy fampiasana tsara ny teny miafina, ny fanararaotana ny habaka anarana, ny halatra fahazoan-dàlana, ary ireo fandrahonana ateraky ny AI. Alaina ho azy ny laharam-pahamehana mifototra amin'ny fahafahana mampiasa azy, ny fahafahana mahatratra azy, ary ny fiantraikan'ny asa mba hahafahan'ny ekipa mifantoka amin'ireo risika tena manan-danja.
Manomboka amin'ny fonosana npm manimba sy ny fiankinan-doha OSS voajirika ka hatramin'ny loza ateraky ny kaody novokarin'ny AI sy ny fitaovan'ny mpamorona rindrambaiko voapoizina, ny Xygeni dia manampy ireo ekipa fiarovana sy injeniera hitazona ny fahitana, ny fitokisana ary ny fifehezana manerana ny rojo famatsiana rindrambaiko maoderina.
Raha hijery ireo fampielezan-kevitra farany momba ny malware sy ireo fonosana ratsy voamarina hitan'ny Xygeni Security Team, tsidiho ny pejy feno. Famintinana ny kaody ratsy.
Mitandrema. Mitandrema haingana. Mitandrema amin'ny Xygeni.
