Nau mai ki te Putanga o Hune o te Xygeni Malicious Code DigestI tēnei marama, i whakaūtia e tā mātou tīma rangahau haumarutanga neke atu i te 645 ngā mōkihi kino puta noa i te npm, PyPI, me (mō te wā tuatahi) te mākete toronga VSCode.
E toru ngā au e hono tahi ana i te marama o Hune: ngā pakanga waipuke putanga tonu i hangaia hei roa ake i ngā rārangi poraka, te tere tere o ngā whakaeke e aro ana ki ngā taputapu AI me ngā rerenga mahi whanaketanga ā-ringa, me ngā whakaeke whakapoauau whakawhirinakitanga kua whakaritea ki ngā mokowā ingoa monorepo ā-roto.
I roto i ngā kaupapa rongonui i tuhia i tēnei marama:
- te aro i waipukehia te npm me te neke atu i te 70 putanga puta noa i te awhe 2.5.x, he kaupapa karo tonu e whakaputaina ana kia noho tonu ki mua i ngā tangohanga.
- A kaupapa tāpōkere Solana e rua ngā ngaru (7–8 o Hune) i whakaputa i te 15 ngā mōkihi e whakaari ana i a rātou anō
@solana-labsngā taputapu rauropi, e aro tika ana ki ngā kaiwhakawhanake Web3 me DeFi. - houzidawang806 neke atu i te 25 ngā putanga i roto i te rā kotahi (13 o Hune), i uru atu ki inenga-pipeline-d8k2 i whakaputaina anōtia puta noa i ngā putanga 21 i waenganui i te 15–18 o Hune.
- te Te Pōhēhētanga CryptoDAO I whakaputa te kaupapa (17 o Hune) i ngā mōkihi 11 i te putanga 99.99.99, ia mōkihi he rite tonu te kawenga i muri i te tāutanga. CI/CD ngā tohu, ngā taipitopito kapua, me ngā mea ngaro o te pēke moni matihiko.
- Ko te wiki o te 20–26 o Hune i whakaatu i te arotahi taputapu AI tino kaha o te marama: ngā kaiawhina ollama (20 putanga), ngā kaiāwhina-ā-ringa-openai (23 putanga), monokaraude, ngā kaiawhina-ai-sdk, a @langgraphjs/keitāuta, kua whakaūtia katoa i roto i te wiki kotahi, e aro tika ana ki a Ollama, ki ngā whakaurunga OpenAI agents SDK, ki a LangGraph, me Claude API.
- E rua kua whakaūtia ngā toronga VSCode kino i puta mai i tēnei marama, he tohu kei te horapa atu ngā kaiwhakaeke ki tua atu i ngā rēhita mōkihi ki roto i te taiao kaiwhakawhanake tonu.
Ko te tauira tautuhi o Hune: kei te neke ngā whakaeke ki ngā toronga IDE, ngā taputapu kaihoko AI, me ngā rerengamahi kaihoko, ina kore he arotake tangata i waenga i te pangia me te whakatinanatanga o tētahi mōkihi kino kua tāutahia motuhake.
Ko tēnei whakahoutanga o ia marama he wāhanga o te kaupapa rangahau mō ngā pūmanawa kino me ngā tūmomo mōrearea mekameka tuku a Xygeni. Mō te horopaki katoa mō ia mōkihi kino kua whakapumautia i tēnei marama, tūhuratia te Whakarāpopototanga Waehere Kino katoa o Hune me ngā rangahau e pā ana mai i te Rōpū Haumarutanga Xygeni.
Wiki 4: Neke atu i te 201 Ngā Mōkihi i Kitea
| Te haukori | mōkī | Te rā |
|---|---|---|
| June 20, 2026 | ||
| npm | panrouter:5.0.2 + 30 putanga puta noa i te awhe 5.x–6.x tae noa ki te 22 o Hune — te pakanga matua o te wiki | E Si'í 20, 2026 |
| npm | trimpprompt:1.0.5 + 4 putanga — he haere tonu mai i te wiki o mua, kei te mahi tonu | E Si'í 20, 2026 |
| npm | monokarau:1.0.1 + 2 putanga — te whakataruna taputapu API Claude | E Si'í 20, 2026 |
| vscode | hōtaka takirua-ā-ringa-ā-pōti-mō-te-kōrero-iti:1.206.0 + 1 putanga — toronga VSCode kino e aro ana ki te whanaketanga āpiha | E Si'í 20, 2026 |
| npm | simplisafe-gatsby:1.0.1 Te whakahāngai i te ingoa o te tūāpapa kāinga atamai | E Si'í 20, 2026 |
| June 21, 2026 | ||
| npm | atlasora-shared:1.0.0 + 6 ngā mōkihi — te whakapoauautanga o te whakawhirinakitanga monorepo kua whakaritea: atlasora-api, -client, -sdk, -types, -utils, -config | E Si'í 21, 2026 |
| npm | pouwhakaurunga:4.0.2 + 6 putanga — he hē te tuhi i ngā kupu, he taputapu whakauru mō te kaupapa whakatairanga | E Si'í 21, 2026 |
| npm | taupānga-ara-llm:1.0.1 Ngā taputapu tirotiro LLM kua arotahihia | E Si'í 21, 2026 |
| pīpi | d0rk3r-whakawhitiwhiti:1.0.0 Mōkihi telemetry kua whakapōreareatia i roto i te PyPI | E Si'í 21, 2026 |
| June 22, 2026 | ||
| pīpi | tm-ai:2.91.75 + 7 putanga — te pakanga waipuke putanga PyPI tonu | E Si'í 22, 2026 |
| pīpi | tono-keteroki-py:1.0.4 + 6 putanga — putanga PyPI e waipuke ana | E Si'í 22, 2026 |
| pīpi | corvinos:0.17.0 + 6 putanga — Kaupapa rēhitatanga papatipu PyPI | E Si'í 22, 2026 |
| June 23, 2026 | ||
| npm | kaiāwhina-tohu-tukutuku3:1.1.1 + 2 putanga — Te arotahi ki te taputapu tohu Web3 | E Si'í 23, 2026 |
| npm | whakawhiti kotahi:1.0.1 + 1 putanga — te rōpū whakaingoa mono-* i te taha o monoclaude me monotacos | E Si'í 23, 2026 |
| June 24, 2026 | ||
| npm | ngā kaiawhina-ollama:0.1.0 + 19 putanga — te kaupapa taputapu AI nui rawa atu o te marama, e aro ana ki te wā whakahaere AI ā-rohe o Ollama | E Si'í 24, 2026 |
| npm | openai-agents-helpers:0.1.1 + 22 putanga — kaupapa kua whakaritea e aro ana ki te pūnaha SDK a ngā kaihoko OpenAI | E Si'í 24, 2026 |
| June 25, 2026 | ||
| npm | ai-sdk-āwhina:1.4.3 Ngā taputapu AI SDK e arotahi ana ki te taha o @langgraphjs/toolkit:1.2.11 | E Si'í 25, 2026 |
| npm | rēhita-whakauru:99.99.99-poc3 + hs-locale-management — He pōhēhē te whakawhirinakitanga o roto o HubSpot ki te mokowā ingoa, he whakaū i te whakamutunga poc i te pakanga rangahau hohe | E Si'í 25, 2026 |
| June 26, 2026 | ||
| npm | kete aho-ngāwari:1.0.1 + 8 putanga tae atu ki te momo easy-string-kit232 — rēhitatanga papatipu i raro i te ingoa taputapu whānui | E Si'í 26, 2026 |
| npm | mōkihi-kino-haumaru:1.0.0 + 5 putanga — kua whakaingoatia te mōkihi hei kino, hei kawenga kua whakaūtia, hei whakamātautau pea, hei pakanga whakapataritari rānei | E Si'í 26, 2026 |
| npm | @vpms/pūnaha-hoahoa:1.1.2 + 2 putanga — te whakatauira i te ingoa pūnaha hoahoa | E Si'í 26, 2026 |
Wiki 3: Neke atu i te 200 Ngā Mōkihi i Kitea
| Te haukori | mōkī | Te rā |
|---|---|---|
| June 13, 2026 | ||
| npm | houzidawang806:1.0.0 + 25 putanga puta noa i te 1.0.x–1.2.x tae atu ki ngā tuākana, teina, me te tuakana, a Houzidawang807 me Houzidawang808 — te pakanga matua o te wiki | E Si'í 13, 2026 |
| npm | whakaaturanga-kaiwhakamihi-hoa:1.0.2 + 4 putanga — ka puta anō te kaupapa pumau i roto i ngā rā maha | E Si'í 13, 2026 |
| npm | tsc-ai:1.2.0 tsc-* rōpū: tsc-ai, tsc-mesh, tsc-lotl — te whakahāngai i te ingoa wāhi taputapu CI | E Si'í 13, 2026 |
| pīpi | neuralbridge-sdk:4.5.4 + 6 putanga puta noa i te 4.5.x–5.1.x — kaupapa PyPI maha-rā e mau tonu ana | E Si'í 13, 2026 |
| June 15, 2026 | ||
| npm | utu-token-cron:999.0.0 + 6 ngā mōkihi — Te rōpū whakapoauau whakawhirinakitanga hanganga DeFi e aro ana ki te taputapu cron me te vault ā-roto | E Si'í 15, 2026 |
| June 16, 2026 | ||
| npm | whare-sdk:9.9.9 + 8 ngā mōkihi — Te tuku nama DeFi me te rōpū rauropi Cardano: tuku nama rere, tuku nama ngaru, janus-*, flowcardano, flowdefi | E Si'í 16, 2026 |
| npm | inenga-takahanga-q3x7:1.0.0 + 8 putanga — mōkihi hex-suffix whānui e rēhita ana i ngā ingoa kaupapa aroturuki-rahi | E Si'í 16, 2026 |
| npm | nic-datagov:1.0.0 + 3 ngā mōkihi — te whakahāngai i te ingoa o te tūāpapa raraunga kāwanatanga: ogd-analytics, ogd-platform, dms-backend | E Si'í 16, 2026 |
| June 17, 2026 | ||
| npm | ngā kirimana-cryptodao:99.99.99 + 10 ngā mōkihi — Te whakapoauautanga o te whakawhirinakitanga CryptoDAO: matua, sdk, bot, whirihora, utils, deploy, signer, backend, types | E Si'í 17, 2026 |
| pīpi | teambot-ai:1.48.0 Ngā taputapu kaihoko AI e arohia ana i roto i te PyPI | E Si'í 17, 2026 |
| June 18, 2026 | ||
| npm | inenga-pipeline-d8k2:1.0.0 + 20 putanga puta noa i te 18 o Hune — he pakanga karo kotahi rā tonu, e whakaputa tonu ana kia roa ake i ngā rārangi poraka | E Si'í 18, 2026 |
| npm | matawai-anake:0.4.5 + 6 putanga — kaupapa waipuke putanga | E Si'í 18, 2026 |
| npm | tae-utils-dee0:1.0.0 + 5 ngā mōkihi hex-suffix whānui: data-utils, string-tools, type-check, fmt-helpers, metrics-probe — rēhitatanga papatipu kua tuhia | E Si'í 18, 2026 |
| npm | @azure-lab-services/ml-ts:99.0.0 Te whakahāngai i te mokowā ingoa Azure ML | E Si'í 18, 2026 |
| June 19, 2026 | ||
| npm | trimpprompt:1.0.2 + trimprompt-hub — te arotahi ki ngā taputapu hangarau tere | E Si'í 19, 2026 |
| npm | kapu-karau:0.8.6 Te whakataruna taputapu API a Claude | E Si'í 19, 2026 |
| pīpi | aiaddin-agent:0.1.0 Ngā taputapu kaihoko AI e arohia ana i roto i te PyPI | E Si'í 19, 2026 |
| npm | web3-crypto-address-utils:0.1.0 Te arotahi ki te taputapu tukutuku 3 | E Si'í 19, 2026 |
Wiki 2: Neke atu i te 135 Ngā Mōkihi i Kitea
| Te haukori | mōkī | Te rā |
|---|---|---|
| June 7, 2026 | ||
| npm | @solana-labs/web3.js:1.0.0 + 5 ngā momo — te pakanga typosquat o te rauropi Solana, te ngaru tuatahi | E Si'í 7, 2026 |
| npm | @jisan901/teamfocus:1.0.0 + 2 putanga | E Si'í 7, 2026 |
| npm | @sflyinc-knapsack/shutterfly-react:999.0.0 Te pōhēhētanga o te whakawhirinakitanga, te putanga kua whakapūpūtia | E Si'í 7, 2026 |
| June 8, 2026 | ||
| npm | @solana-labs/web3.js:1.98.102 + 9 ngā momo — te pakanga typosquat o te rauropi Solana, te ngaru tuarua | E Si'í 8, 2026 |
| pīpi | helixagentai:0.1.3 Ngā taputapu kaihoko AI e arohia ana i roto i te PyPI | E Si'í 8, 2026 |
| June 9, 2026 | ||
| npm | @nstrlabs/sdk:99.0.0 + 7 ngā mōkihi — te whakapoauautanga whakawhirinaki ki te mokowā ingoa monorepo ā-roto | E Si'í 9, 2026 |
| npm | @klapp-login-pūhara/tāone-taketake-sdk:99.0.0 + 9 ngā mōkihi — te whakataruna tūāpapa motuhēhēnga puta noa i ngā mokowā ingoa klapp maha | E Si'í 9, 2026 |
| npm | kaiawhina-poraka-0:1.0.0 + 7 ngā mōkihi — te rōpū whaipainga crypto/DeFi e aro ana ki ngā kaiwhakawhanake Web3 | E Si'í 9, 2026 |
| npm | @kāri-pci-raraunga/toa:99.0.0 Ngā ingoa raraunga kāri utu kua arotahihia | E Si'í 9, 2026 |
| June 10, 2026 | ||
| npm | pūnaha-hoahoa-o-morningstar:99.0.0 + 2 putanga — te whakatauira pūnaha hoahoa pūtea | E Si'í 10, 2026 |
| June 11, 2026 | ||
| npm | pocteszep:1.0.1 + 5 ngā putanga i whakaputaina i taua rā anō | E Si'í 11, 2026 |
| npm | @coze-noa/rohe-kōrerorero:99.1.1 Te whakahāwea i te ingoa ingoa o te tūāpapa kōrerorero AI | E Si'í 11, 2026 |
| pīpi | waeaata:1.0.0 + 1 putanga — te whakataruna tūāpapa karere i roto i te PyPI | E Si'í 11, 2026 |
| June 12, 2026 | ||
| npm | ecto-corsair-whisper-6f3b9:1.0.18 + 7 ngā momo ecto-* — te rōpū ingoa kua whakapōreareatia | E Si'í 12, 2026 |
| npm | internallib_v984:1.0.3 + rōpū internallib_v557 — 13 putanga o ngā kaiwhakapohehe whare pukapuka ā-roto | E Si'í 12, 2026 |
| npm | tukutuku-haerenga:999.0.0 Te pōhēhētanga o te whakawhirinakitanga, te putanga kua whakapūpūtia | E Si'í 12, 2026 |
| pīpi | cdjeez:0.32.0 | E Si'í 12, 2026 |
Wiki 1: Neke atu i te 118 Ngā Mōkihi i Kitea
| Te haukori | mōkī | Te rā |
|---|---|---|
| Kia 30, 2026 | ||
| npm | @cloudplatform-single-spa/whakahaere:99.99.100 Te pōhēhētanga o te whakawhirinakitanga, te putanga kua whakapūpūtia | Kia 30, 2026 |
| vscode | kaiwhakahaere-xampp:5.1.3 Toronga VSCode — te whakapohehe i te taputapu kaiwhakawhanake | Kia 30, 2026 |
| June 1, 2026 | ||
| npm | @tse-digital/matua:99.0.0 Te pōhēhētanga o te whakawhirinakitanga — i pāngia hoki a @telenor-se me @ownit | E Si'í 1, 2026 |
| npm | cms-storehub:1.3.4 + 2 putanga, rōpū mokowā ingoa CMS | E Si'í 1, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.69 + 6 putanga, ngā tau putanga kua whakanuia e aro ana ki ngā tohu AWS | E Si'í 1, 2026 |
| npm | ngā tuhinga tūroro:75.0.0 Whāinga ingoa wāhi hauora | E Si'í 1, 2026 |
| npm | @emcd-vue/auth:6.4.9 Te whakahāwea i te ingoa o te whakawhitinga moni matihiko | E Si'í 1, 2026 |
| pīpi | simtooreal-cli:0.3.0 | E Si'í 1, 2026 |
| June 2, 2026 | ||
| npm | te aro: 2.5.8 + 70 putanga puta noa i te awhe 2.5.x, Pipiri 2–5 — te pakanga matua o te wā | E Si'í 2, 2026 |
| npm | @langgraphjs/keitāuta:1.2.10 Ngā taputapu LangGraph e arotahi ana | E Si'í 2, 2026 |
| June 4, 2026 | ||
| npm | @sentry-browser-sdk/profiling-node:1.0.1 + 2 putanga, te whakahāngai ingoa Sentry | E Si'í 4, 2026 |
| npm | internallib_v346:1.0.3 + 2 putanga, kaiwhakahē whare pukapuka ā-roto | E Si'í 4, 2026 |
| npm | ai-sdk-āwhina:0.2.1 + 7 putanga, e aro ana ki ngā taputapu AI SDK | E Si'í 4, 2026 |
Kati te Waehere Kino i mua i tōna taenga atu ki tōu Pipeline
Kua neke atu ngā tūmomo mōrearea o te mekameka tuku pūmanawa i ngā mea noa iho. Ko ngā whakaeke whakapoauau whakawhirinaki, ngā tahae tohu, ngā pūmanawa kino e aro ana ki te AI, me ngā taputapu kaiwhakawhanake kua paitinihia kei te pā ki ngā tīma tūturu i roto i te ao tūturu. SDLCi ia wiki.
Xygeni's te kimi i ngā pūmanawa kino a tūāpapa haumarutanga mekameka tuku ka hoatu ki ngā whakahaere te tirohanga ki te hopu i ngā whakawhirinakitanga kino i mua i te whakahaere i runga i te mīhini kaiwhakawhanake, te tomo ki te pūnaha hanga, te tae atu rānei ki te whakaputa. Ka kapi te kapinga i te npm, PyPI, VSCode, me tua atu, te aroturuki i ngā tauira whakaputa whakapae, te whakamahi kino i te mokowā ingoa, te patopato, me ngā tikanga whakaeke AI-taketake i a rātou e puta mai ana.
Ka whakatauhia aunoatia ia kitenga e te āheinga ki te whakamahi, te āheinga ki te toro atu, me te pānga ki te pakihi, kia arotahi ai tō rōpū ki ngā mea e tika ana kia whakatikahia, kaua ki ngā mea haruru.
Ahakoa he mōkihi pūmanawa tuwhera kino, he taputapu kaiwhakawhanake kua takahia, he mōrearea waehere rānei i hangaia e te AI, ka pupuri a Xygeni i ngā tīma haumarutanga me te miihini kia kotahi te taahiraa ki mua i te whenua mōrearea mekameka tuku.
Tūhurahia ia mōkihi kino me ngā kaupapa kua whakamanahia e te Rōpū Haumarutanga Xygeni i roto i te Whakarāpopototanga Waehere Kino.
Kia haumaru. Kia tere. Kia mau ki te mana whakahaere me Xygeni.
