Rea u amohela khatisong ea Phupu ea Xygeni Malicious Code Digest. Khoeling ena, Sehlopha sa rona sa lipatlisiso tsa ts'ireletso se tiisitse liphutheloana tse kotsi tse fetang 780 ho pholletsa le npm, PyPI, le OpenVSX ('maraka oa katoloso ea VS Code), tse lateloang ho pholletsa le li-digest tse hlano tsa beke le beke..
Phupu e hlalositsoe ke mekhoa e meraro e kopanang: matšolo a tsoelang pele, a nang le mefuta e mengata ea li-version-fluid a reretsoeng ho feta ho tlosoa ha li-induction; keketseho e matla ea litlhaselo tse shebaneng le lisebelisoa tsa AI, li-server tsa MCP, le mesebetsi ea baemeli; le matšolo a hokahaneng a pherekano ea ho itšetleha khahlanong le tsona ka bobeli. enterprise libaka tsa mabitso le tikoloho ea crypto/DeFi.
Har'a matšolo a hlahelletseng ka ho fetisisa a tlalehiloeng khoeling ena:
bingo-aiho PyPI e ile ea hlaha hape habeli, ea tlatsa registry ka mefuta e fetang 150 ho pholletsa le li-burst tse peli (Phupu 13 le Phupu 21), e tiisang hore ena ke ts'ebetso e tsoelang pele, eseng ea hang feela.zevairoutere bile letšolo le leholo ka ho fetisisa la sephutheloana se le seng la Phupu: liphetolelo tse fetang 65 ho pholletsa le npm, tse phatlalalitsoeng khafetsa ho tloha ka la 25-28 Phupu.gcli-control, Windows RAT re hlahlobile ka botlalo e fetisang C2 ea eona ho ea ho npoint.io, e nyolohile ho tloha phetolelong ea 0.1.0 ho ea ho 0.13.0 ka libeke tse tharo tse fapaneng.@szc-ft/mcp-szcd-client, sephutheloana se ka morao SkillLeak, mongolo oa rona oa ho hlakola boitsebiso ba ho ngola o fanoeng ka tsebo ea MCP e kopantsoeng, o tiisitsoe ka la 2 Phupu.- Beke ea la 7 Phupu e tlisitse sepheo se boima ka ho fetisisa sa ho sebelisa lisebelisoa tsa AI khoeling ena:
mcp-server-pg,anthropic-toolkit,openai-agents-helpers,ollama-helpers, 'me@langgraphjs/toolkit, ho iketsa eka ke MCP, Anthropic, OpenAI, Ollama, le LangGraph. - Sehlopha sa boiketsetso sa PayPal sa liphutheloana tse 17 se fihlile npm ka la 27 Phupu, kaofela ka mofuta oa 28.0.0 ka metsotso e seng mekae.
@wagni_bot, liphutheloana tse ka bang 60 npm tse etsisang li-SDK tsa sepache sa crypto (Ethereum, Solana, Binance, le tse ling), kaofela li phatlalalitsoe ka letsatsi le le leng, la 10 Phupu.- Ho hlahile dikatoloso tse fetang leshome le metso e mmedi tsa VS Code tsa bohata ho OpenVSX, tse tiisang hore bahlaseli ba ntse ba atoloha ka nqane ho dingodiso tsa diphuthelwana ho ya ho IDE ka boyona.
Mokhoa o hlalosang oa Phupu: litlhaselo li ntse li lebisa tlhokomelo ho baemeli ba AI le lisebelisoa tse iketsang tse kenyang liphutheloana tse se nang mohlahlobi oa motho ka har'a potoloho, ka lebelo la phatlalatso le hahiloeng ho feta tlhahlobo ea letsoho.
Ka tlase ke kakaretso ea seo re se fumaneng. U ka bona lintlha tsohle tsa libeke tse hlano tse senotsoeng ka botlalo ho Lenane la Malicious Code Digest.
Beke ea 5: Liphutheloana tse fetang 180 li fumanoe
| Ts'ebetso | sephutheloana | E netefalitsoe |
|---|---|---|
| npm | @cryptosrvc/shift-sdk-v4:1.0.77 | Jul 24, 2026 |
| openvsx | cesium/gltf-vscode:0.0.1 | Jul 24, 2026 |
| pypi | taolo ea gcli:0.13.0 | Jul 24, 2026 |
| vscode | moea: 1.0.0 | Jul 25, 2026 |
| npm | zevairouter:1.0.109 | Jul 25, 2026 |
| npm | tumello ea boitsebahatso:28.0.0 | Jul 27, 2026 |
| npm | tšebeletso ea barekisi-paypal:28.0.0 | Jul 27, 2026 |
| npm | dikarolo tsa xo-setho:28.0.0 | Jul 27, 2026 |
| openvsx | technosophos/vscode-helm:0.0.1 | Jul 27, 2026 |
| openvsx | bastienboutonnet/vscode-dbt:0.0.1 | Jul 27, 2026 |
| npm | markscan:1.0.0 | Jul 28, 2026 |
| npm | ntlo ea ntlo:1.0.0 | Jul 28, 2026 |
| npm | tlaleho-e ncha-ea akrai:1.0.0 | Jul 28, 2026 |
| pypi | vtranalytic:8.0.0 | Jul 28, 2026 |
| npm | greatcall-bareki-commapi:99.0.0 | Jul 29, 2026 |
| npm | matheba: 2.1.1 | Jul 29, 2026 |
| npm | @ey-china/ey-mothusi:1.0.1 | Jul 30, 2026 |
| npm | flydev:0.0.1 | Jul 30, 2026 |
| npm | @qtestorgz/sdk:1.0.0 | Jul 30, 2026 |
Beke ea 4: Liphutheloana tse fetang 165 li fumanoe
| Ts'ebetso | sephutheloana | E netefalitsoe |
|---|---|---|
| npm | javas-crypto:2.0.4 | Jul 17, 2026 |
| npm | leru-la-pay-le ... | Jul 17, 2026 |
| npm | ka mor'a lichelete:99.0.0 | Jul 19, 2026 |
| npm | twilio-serverless:99.99.99 | Jul 21, 2026 |
| npm | setsi sa phepelo:1.0.1 | Jul 21, 2026 |
| npm | @offa/offa-uwk:999.0.0 | Jul 21, 2026 |
| npm | lisebelisoa tsa sebopeho sa letsatsi-xz:1.0.1 | Jul 21, 2026 |
| pypi | bingo-ai:6.2.241 | Jul 21, 2026 |
| npm | @bpa-kahare/bpa-utils:99.99.99 | Jul 22, 2026 |
| npm | n8n-nodes-pwn:1.0.1 | Jul 22, 2026 |
| pypi | taolo ea gcli:0.1.0 | Jul 22, 2026 |
| npm | uniswap-sdk-v4:1.0.0 | Jul 23, 2026 |
| npm | karabelo ea wagmi:1.0.0 | Jul 23, 2026 |
| npm | e sireletsehileng ka ethers:1.0.0 | Jul 23, 2026 |
| pypi | taolo ea gcli:0.12.0 | Jul 24, 2026 |
| npm | datefmt-pro:1.0.1 | Jul 24, 2026 |
| npm | @daylightqc/date-fmt-lite:1.0.0 | Jul 24, 2026 |
Beke ea 3: Liphutheloana tse fetang 145 li fumanoe
| Ts'ebetso | sephutheloana | E netefalitsoe |
|---|---|---|
| npm | env-fast:1.0.0 | Jul 11, 2026 |
| pypi | khoeli-uv:0.0.25 | Jul 12, 2026 |
| npm | google-caja-bower:1000.800.20 | Jul 13, 2026 |
| npm | sephutheloana sa vuln:99.9.14 | Jul 13, 2026 |
| pypi | bingo-ai:6.2.109 | Jul 13, 2026 |
| npm | tšebeliso e mpe: 99.9.9 | Jul 13, 2026 |
| npm | sephutheloana sa mantlha sa amdocs:11.11.11 | Jul 14, 2026 |
| npm | arb-kit:1.0.0 | Jul 14, 2026 |
| npm | lisebelisoa tsa senotlolo sa solana:1.0.0 | Jul 14, 2026 |
| npm | teko-e 'ngoe ea axios:1.18.9 | Jul 15, 2026 |
| pypi | plungerhacker:2.0.1 | Jul 15, 2026 |
| pypi | setsebi sa ho ngola lintlha: 0.7.8 | Jul 16, 2026 |
| pypi | pylogora:0.7.8 | Jul 16, 2026 |
| npm | @across-toolkit/eslint-config:99.0.0 | Jul 17, 2026 |
| npm | validpilot-mcp:1.4.0 | Jul 17, 2026 |
| npm | nyxora:26.7.17 | Jul 17, 2026 |
Beke ea 2: Liphutheloana tse fetang 200 li fumanoe
| Ts'ebetso | sephutheloana | E netefalitsoe |
|---|---|---|
| pypi | procingo: 5.2.7 | Jul 4, 2026 |
| npm | neon-terminal:0.3.0 | Jul 4, 2026 |
| npm | moemeli oa nolimit:1.0.336 | Jul 6, 2026 |
| vscode | android-support-framework-vs:0.0.1 | Jul 6, 2026 |
| npm | mcp-server-pg:1.0.0 | Jul 7, 2026 |
| npm | lisebelisoa tsa anthropic:1.3.1 | Jul 7, 2026 |
| npm | bathusi-ba-baemeli ba openai:1.3.3 | Jul 7, 2026 |
| npm | debugcli:4.4.1 | Jul 7, 2026 |
| npm | hello244a:1.0.38 | Jul 7, 2026 |
| npm | thunder-rony:99.9.9 | Jul 8, 2026 |
| pypi | khoeli-uv:0.0.5 | Jul 9, 2026 |
| npm | es6-codify:2.0.0 | Jul 9, 2026 |
| npm | li-n8n-nodes-mcputils:0.1.4 | Jul 9, 2026 |
| npm | @wagni_bot/hyperliquid-sdk:1.0.0 | Jul 10, 2026 |
| npm | @wagni_bot/metemask-sdk:1.0.0 | Jul 10, 2026 |
| npm | @wagni_bot/pumpfun-sdk:1.0.0 | Jul 10, 2026 |
| npm | @wagni_bot/binance-sdk:1.0.0 | Jul 10, 2026 |
| npm | @wagni_bot/ethereum-wallet:1.0.0 | Jul 10, 2026 |
| npm | teko-d3do:99.9.9 | Jul 10, 2026 |
| npm | moreki-li-cookie-moemeli: 99.9.6 | Jul 10, 2026 |
Beke ea 1: Liphutheloana tse fetang 90 li fumanoe
| Ts'ebetso | sephutheloana | E netefalitsoe |
|---|---|---|
| npm | li-module tse rohakiloeng: 999.1.2 | Jul 1, 2026 |
| npm | @szc-ft/mcp-szcd-client:0.39.0 | Jul 2, 2026 |
| npm | pp-reaction-v5:30.0.2 | Jul 1, 2026 |
| npm | lihlopha tsa linaleli:0.5.1 | Jul 1, 2026 |
| npm | letsatsi-fns-lite:1.0.9 | Jul 2, 2026 |
| npm | @easypayment/medusa-paypal:0.7.6 | Jul 2, 2026 |
| npm | dl-pp-latm:80.4.2 | Jul 2, 2026 |
| npm | @sudoughnym/enviro-demo:99.99.99 | Jul 1, 2026 |
| npm | moemeli oa nolimit:1.0.316 | Jul 2, 2026 |
| npm | rohakiloeng-ecto-d3ab00:1.0.0 | Jul 3, 2026 |
| npm | @checkrhq/adjudication-api-client:0.0.2 | Jul 3, 2026 |
Ho tloha ho Mefuta ea Lifefo ho ea ho Boikaketsi ba AI: Seo Litlhaselo tsa Ketane ea Phepelo ea Phupu li se Senolang
Matšolo a kaholimo ha se a maemo a holimo, ke a motheo hona joale. Lifefo tse nang le likhohola tsa mofuta, ho theoha ha boiketsetso bo hlophisitsoeng, le batho ba tšoanang le lisebelisoa tsa AI li hlasela lihlopha tsa 'nete ka 'nete. SDLCbeke e 'ngoe le e 'ngoe, hangata ho se na motho ea kenang lipakeng tsa phatlalatso le ho kenya.
Xygeni's ho lemoha malware 'me ssethala sa ts'ireletso ea ketane ea upply e fa mekhatlo ponahalo ea ho tšoara mekhoa e kotsi pele e qala ho sebetsa mochining oa moqapi, ho kena tsamaisong ea kaho, kapa ho fihlela tlhahiso. Kakaretso e akaretsa npm, PyPI, OpenVSX, le ho feta, ho beha leihlo mekhoa e belaetsang ea phatlalatso, tšebeliso e mpe ea sebaka sa mabitso, ho ngola ka mongolo o fosahetseng, le mekhoa ea tlhaselo ea tlhaho ea AI ha e ntse e hlaha.
Sephetho se seng le se seng se etelletsoa pele ka boiketsetso ke ho sebelisoa ha sona, ho fihlelleha ha sona, le tšusumetso ea khoebo, kahoo sehlopha sa hau se tsepamisa maikutlo ho seo ehlile se hlokang ho lokisoa, eseng lerata.
Hlahloba sephutheloana se seng le se seng se kotsi le letšolo le netefalitsoeng ke Sehlopha sa Tšireletso sa Xygeni ho Khoutu e mpe ea Molao.
Lula u sireletsehile. Lula u potlakile. Lula u laola Xygeni.




