Welcome to the July edition of the Xygeni Malicious Code Digest. This month, our security research team confirmed over 780 malicious packages across npm, PyPI, and OpenVSX (the VS Code extension marketplace), tracked across five weekly digests.
July was defined by three converging trends: sustained, high-volume version-flooding campaigns designed to outlast takedowns; a sharp escalation in attacks targeting AI tooling, MCP servers, and agentic workflows; and coordinated dependency-confusion campaigns against both enterprise namespaces and crypto/DeFi ecosystems.
ਇਸ ਮਹੀਨੇ ਦਸਤਾਵੇਜ਼ ਕੀਤੇ ਗਏ ਸਭ ਤੋਂ ਮਹੱਤਵਪੂਰਨ ਮੁਹਿੰਮਾਂ ਵਿੱਚੋਂ:
bingo-aion PyPI resurfaced twice, flooding the registry with well over 150 versions across two bursts (July 13 and July 21), confirming this is an ongoing operation, not a one-off.zevairouterbecame July’s largest single-package campaign: over 65 versions across npm, published continuously from July 25–28.gcli-control, the Windows RAT we profiled in detail that routes its C2 through npoint.io, escalated from version 0.1.0 to 0.13.0 across three separate weeks.@szc-ft/mcp-szcd-client, the package behind ਸਕਿੱਲਲੀਕ, our writeup on a credential decryptor delivered through a bundled MCP skill, was confirmed July 2.- The week of July 7 brought the month’s heaviest AI-tooling targeting:
mcp-server-pg,anthropic-toolkit,openai-agents-helpers,ollama-helpersਹੈ, ਅਤੇ@langgraphjs/toolkit, impersonating MCP, Anthropic, OpenAI, Ollama, and LangGraph. - A 17-package PayPal impersonation cluster hit npm July 27, all at version 28.0.0 within minutes.
@wagni_bot, roughly 60 npm packages impersonating crypto wallet SDKs (Ethereum, Solana, Binance, and more), all published in a single day, July 10.- Over a dozen fake VS Code extensions surfaced on OpenVSX, confirming attackers are expanding beyond package registries into the IDE itself.
The defining pattern of July: attacks increasingly target the AI agents and automated tooling that install packages with no human reviewer in the loop, at a publishing velocity built to outrun manual review.
Below is a summary of what we found. You can see all five weeks’ data disclosed in full detail at the Malicious Code Digest index.
ਹਫ਼ਤਾ 5: 180 ਤੋਂ ਵੱਧ ਪੈਕੇਜ ਲੱਭੇ ਗਏ
ਹਫ਼ਤਾ 4: 165 ਤੋਂ ਵੱਧ ਪੈਕੇਜ ਲੱਭੇ ਗਏ
ਹਫ਼ਤਾ 3: 145 ਤੋਂ ਵੱਧ ਪੈਕੇਜ ਲੱਭੇ ਗਏ
ਹਫ਼ਤਾ 2: 200 ਤੋਂ ਵੱਧ ਪੈਕੇਜ ਲੱਭੇ ਗਏ
ਹਫ਼ਤਾ 1: 90 ਤੋਂ ਵੱਧ ਪੈਕੇਜ ਲੱਭੇ ਗਏ
From Version Storms to AI Impersonation: What July’s Supply Chain Attacks Reveal
The campaigns above aren’t edge cases, they’re the baseline now. Version-flooding storms, coordinated impersonation drops, and AI-tooling lookalikes are hitting real teams in real SDLCs every week, often with no human in the loop between publication and install.
ਜ਼ਾਇਗੇਨੀ ਦਾ ਮਾਲਵੇਅਰ ਖੋਜ ਅਤੇ supply chain security platform gives organizations the visibility to catch malicious dependencies before they execute on a developer machine, enter a build system, or reach production. Coverage spans npm, PyPI, OpenVSX, and beyond, monitoring for suspicious publishing patterns, namespace abuse, typosquatting, and AI-native attack techniques as they emerge.
ਹਰੇਕ ਖੋਜ ਨੂੰ ਸ਼ੋਸ਼ਣਯੋਗਤਾ, ਪਹੁੰਚਯੋਗਤਾ, ਅਤੇ ਵਪਾਰਕ ਪ੍ਰਭਾਵ ਦੁਆਰਾ ਆਪਣੇ ਆਪ ਤਰਜੀਹ ਦਿੱਤੀ ਜਾਂਦੀ ਹੈ, ਇਸ ਲਈ ਤੁਹਾਡੀ ਟੀਮ ਇਸ ਗੱਲ 'ਤੇ ਧਿਆਨ ਕੇਂਦਰਿਤ ਕਰਦੀ ਹੈ ਕਿ ਅਸਲ ਵਿੱਚ ਕਿਸ ਚੀਜ਼ ਨੂੰ ਠੀਕ ਕਰਨ ਦੀ ਲੋੜ ਹੈ, ਨਾ ਕਿ ਸ਼ੋਰ 'ਤੇ।
ਵਿੱਚ Xygeni ਸੁਰੱਖਿਆ ਟੀਮ ਦੁਆਰਾ ਪ੍ਰਮਾਣਿਤ ਹਰੇਕ ਖਤਰਨਾਕ ਪੈਕੇਜ ਅਤੇ ਮੁਹਿੰਮ ਦੀ ਪੜਚੋਲ ਕਰੋ ਖ਼ਰਾਬ ਕੋਡ ਡਾਇਜੈਸਟ.
ਸੁਰੱਖਿਅਤ ਰਹੋ। ਤੇਜ਼ ਰਹੋ। ਜ਼ਾਇਜੇਨੀ ਨਾਲ ਕੰਟਰੋਲ ਵਿੱਚ ਰਹੋ।
