Wilujeng sumping di Xygeni Malicious Code Digest édisi Méi. Bulan ieu, tim panalungtikan kaamanan kami teras-terasan ngalacak bentang ancaman ranté suplai parangkat lunak anu terus mekar di sakumna pendaptaran pakét umum, alat pamekar, alur kerja anu dibantuan AI, sareng aplikasi modéren. CI/CD lingkungan. Sapanjang bulan Méi, Xygeni ngaidéntifikasi sareng ngavalidasi ratusan pakét jahat anu nargétkeun ékosistem npm, PyPI, VS Code, sareng OpenVSX.
Tapi Méi teu ngan ukur ngeunaan volume. Éta ogé mangrupikeun bulan dimana para panyerang beuki nyaluyukeun perdaganganana kana lingkungan pamekaran asli AI, asumsi kapercayaan pamekar, sareng otomatisasi pipelines.
Di antara panalungtikan anu paling penting anu diterbitkeun ku Tim Kaamanan Xygeni bulan ieu:
- JulesJacker, kampanye malware npm multi-tahap anu nyamar janten agén Jules AI Google pikeun maok gudang, nyiksa CI/CD lingkungan, sareng bahkan narékahan kotak pasir anu nganalisisna. Kampanye éta ngenalkeun loader host-gated anu dienkripsi, ditempa
google-labs-jules[bot]commits, maling metadata awan, sareng pangintipan Kubernetes ngalawan infrastruktur analisis éta sorangan. - PhantomBot, kampanye npm jahat anu nyalahgunakeun dompét palsu, blockchain, sareng alat Web3 pikeun maok kredensial, ngaruksak lingkungan pamekar, sareng narékahan alur kerja anu aya hubunganana sareng crypto ngalangkungan panyalahgunaan katergantungan sareng pangiriman muatan bertahap.
- Ékosistem npm jahat skala ageung anu nyalahgunakeun utilitas TypeScript palsu, pakét téma AI, impersonasi tooling internal, pustaka frontend, pembantu awan, sareng kerangka pambangun pikeun lingkungan sidik jari, ngaluarkeun kredensial, nyebarkeun persistensi, sareng ngaruksak sistem pamekar.
- Gelombang paket jahat anu terus-terusan ngamangpaatkeun kabingungan dependensi, typosquatting, panyalahgunaan pasca-instalasi, impersonasi alat AI, inflasi versi, sareng panyalahgunaan namespace anu diulang-ulang anu dirancang pikeun ngalangkungan heuristik kapercayaan pamekar sareng ngorbankeun sistem modéren. SDLC alur kerja sateuacan deteksi.
- Kapanggihna kampanye malware lintas platform sapertos
@jaggle/resizeobservespembajak clipboard, anu nyamar jadi pakét anu sah bari nerapkeun persistensi berbasis Python sareng substitusi clipboard crypto-wallet di sakumna sistem Linux, macOS, sareng Windows.
Sapanjang bulan, urang ogé niténan konvergénsi anu ningkat antara alat AI, ékosistem sumber terbuka, sareng serangan ranté suplai parangkat lunak. Aktor ancaman beuki narékahan alur kerja pamekaran anu dibantuan AI, lingkungan agén, kopilot, sareng pangwangunan asli awan. pipelines salaku bagian tina operasi maling kredensial sareng kompromi repositori anu langkung lega.
Serangan-serangan ieu sanés deui kasus typosquatting anu kapisah. Éta ngalibatkeun kampanye penerbitan anu terkoordinasi, burst versi otomatis, maling token awan, CI/CD panyalahgunaan, pementasan muatan énkripsi, panghindaran sandbox, sareng téknik kompromi persisten anu dirancang khusus pikeun nyampur kana ékosistem pamekar anu dipercaya.
Apdet bulanan ieu mangrupikeun bagian tina inisiatif panalungtikan ancaman malware sareng ranté suplai Xygeni anu terus-terusan, dimana tim kami terus-terusan ngavalidasi pakét jahat, nalungtik pola serangan anu muncul, sareng nyebarkeun intelijen anu tiasa ditindaklanjuti pikeun ngabantosan tim kaamanan, AppSec, sareng DevSecOps tetep payuneun résiko ranté suplai anu terus berkembang.
Pikeun kontéks lengkep dina unggal pakét jahat, kampanye malware, sareng analisis ancaman anu diterbitkeun bulan ieu, mangga tingali Ringkesan Kodeu Jahat lengkep bulan Méi sareng panalungtikan anu aya hubunganana ti Tim Kaamanan Xygeni.
Minggu ka-4: Leuwih ti 104 Pakét Kapanggih
| ékosistem | paket | tanggal |
|---|---|---|
| npm | @gbrlxvii/ts-form-utils:4.6.0 | Bisa 25, 2026 |
| npm | @gbrlxvii/ts-form-utils:4.7.0 | Bisa 25, 2026 |
| npm | pi-ocr:0.2.0 | Bisa 25, 2026 |
| npm | @jaggle/resizeobserves:1.0.11 | Bisa 25, 2026 |
| npm | toko-fnd:0.0.7 | Bisa 25, 2026 |
| npm | @gbrlxvii/ts-project-lint:1.7.0 | Bisa 25, 2026 |
| npm | @gbrlxvii/ts-project-lint:1.8.0 | Bisa 25, 2026 |
| npm | idéntifikasi-pamaké-sistem-cli:7.0.0 | Bisa 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.13 | Bisa 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.12 | Bisa 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.15 | Bisa 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.14 | Bisa 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.16 | Bisa 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.19 | Bisa 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.17 | Bisa 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.18 | Bisa 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.20 | Bisa 26, 2026 |
| npm | iklan-internasional:99.0.1 | Bisa 26, 2026 |
| npm | tempo-layout:99.0.0 | Bisa 26, 2026 |
| npm | tempo-layout:99.0.2 | Bisa 26, 2026 |
| npm | itc-actors-api:99.0.0 | Bisa 26, 2026 |
| npm | modul-dibagi-walmart:99.0.1 | Bisa 26, 2026 |
| npm | komponén-wml:99.0.1 | Bisa 26, 2026 |
| npm | platform-tempo:99.0.1 | Bisa 26, 2026 |
| npm | wml-core:99.0.1 | Bisa 26, 2026 |
| npm | @izumiswap/sdk:3.0.3 | Bisa 26, 2026 |
| npm | @izumiswap/sdk:3.0.4 | Bisa 26, 2026 |
| npm | @izumiswap/sdk:3.0.5 | Bisa 26, 2026 |
| npm | json-ka-skéma-graphql-basajan:1.0.0 | Bisa 26, 2026 |
| npm | aplikasi-cdk-réaktif:1.0.1 | Bisa 27, 2026 |
| npm | mmt-statis:1.0.0 | Bisa 27, 2026 |
| npm | aplikasi-cdk-réaktif:1.0.4 | Bisa 27, 2026 |
| npm | cdk-sagemaker-henteuebook-alur kerja:1.0.3 | Bisa 27, 2026 |
| npm | kapanggihna-ngawangun:1.0.0 | Bisa 27, 2026 |
| pypi | dunyakanga:1.0.4 | Bisa 27, 2026 |
| npm | forge-jsxy:1.0.92 | Bisa 27, 2026 |
| npm | @gs-select/aplikasi-klien-tabungan:99.0.0 | Bisa 27, 2026 |
| npm | forge-jsxy:1.0.105 | Bisa 27, 2026 |
| npm | forge-jsxy:1.0.107 | Bisa 27, 2026 |
| npm | forge-jsxy:1.0.108 | Bisa 27, 2026 |
| npm | éditorial-mse-auténtikasi-ui:99.0.1 | Bisa 28, 2026 |
| npm | kode-éditorial:99.0.1 | Bisa 28, 2026 |
| npm | komponén-alat-mse:99.99.100 | Bisa 28, 2026 |
| npm | forge-jsxy:1.0.120 | Bisa 28, 2026 |
| npm | @gbrlxvi/ts-form-utils:1.0.0 | Bisa 29, 2026 |
| vscode | asisten-pangembang-rudranex:1.0.1 | Bisa 29, 2026 |
| npm | nemo-reporter:1.8.2 | Bisa 29, 2026 |
| npm | @qlab/ui:2.0.5 | Bisa 29, 2026 |
| npm | forge-jsxy:1.0.121 | Bisa 29, 2026 |
| npm | @qlab/ui:2.0.6 | Bisa 29, 2026 |
| npm | @qlab/komponén-intelijen:2.0.6 | Bisa 29, 2026 |
| npm | setelan-mesin-panéangan:1.0.9106 | Bisa 29, 2026 |
| npm | alat-pangaturan-opensearch:1.0.9107 | Bisa 29, 2026 |
| npm | @0xlr/vercel-analytics:999.0.0 | Bisa 29, 2026 |
| npm | @0xlr/garis-hareup:999.0.0 | Bisa 29, 2026 |
| npm | @0xlr/stripe-checkout-js:999.0.0 | Bisa 29, 2026 |
| npm | @0xlr/sentry-web:999.0.0 | Bisa 29, 2026 |
| npm | @0xlr/juru-auth:999.0.0 | Bisa 29, 2026 |
| npm | @0xlr/supabase-db:999.0.0 | Bisa 29, 2026 |
| npm | @0xlr/prisma-client-js:999.0.0 | Bisa 29, 2026 |
| npm | @flexspec/cli:0.3.1-dev.26612027722 | Bisa 29, 2026 |
| npm | @cloudplatform-single-spa/administrasi:99.99.100 | Bisa 30, 2026 |
| npm | @cloudplatform-single-spa/svp-s3-storage:99.99.100 | Bisa 30, 2026 |
| npm | @maximvs1538/os-npm:99.0.0 | Bisa 30, 2026 |
| npm | @asup-gampang/rute-pendaratan:99.9.5 | Bisa 30, 2026 |
| npm | @asup-gampang/pendaptaran-luar-navigator-fop:99.9.5 | Bisa 30, 2026 |
| npm | @easily-entry/rutes:99.9.5 | Bisa 30, 2026 |
| npm | cms-github:4.2.4 | Bisa 30, 2026 |
| npm | @t-in-one/form_product_token:5.7.1 | Bisa 30, 2026 |
| npm | @capibar.chat/ui-kit:99.5.7 | Bisa 30, 2026 |
| npm | cms-helpgit:4.2.6 | Bisa 30, 2026 |
| npm | cms-helpgit:4.2.8 | Bisa 30, 2026 |
| vscode | xampp-manager:5.1.3 | Bisa 30, 2026 |
| npm | @template-obrolan/auth:1.0.0 | Bisa 31, 2026 |
| npm | cms-storehub:1.3.4 | Bisa 31, 2026 |
| npm | cms-storehub:1.3.5 | Bisa 31, 2026 |
| npm | strategi-lokasi-ritel-frontend:1.1.1 | Bisa 31, 2026 |
| npm | strategi-lokasi-ritel-frontend:1.1.2 | Bisa 31, 2026 |
| npm | cms-storehub:1.3.6 | Bisa 31, 2026 |
| pypi | simtooreal-cli:0.3.0 | Jun 01, 2026 |
| npm | conversa-sdk:2.0.2 | Jun 01, 2026 |
| npm | veltrix:9.0.0 | Jun 01, 2026 |
| npm | jingmeideshishi: 1.0.4 | Jun 01, 2026 |
| npm | @tse-digital/core:99.0.0 | Jun 01, 2026 |
| npm | @telenor-se/core:99.0.0 | Jun 01, 2026 |
| npm | @ownit/inti:99.0.0 | Jun 01, 2026 |
| npm | jingmeideshishi: 1.0.5 | Jun 01, 2026 |
| npm | dokumén pasien: 75.0.0 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.69 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.68 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.82 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.80 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.81 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.83 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.3 | Jun 01, 2026 |
| npm | veltrix:9.0.1 | Jun 01, 2026 |
| npm | @emcd-vue/auth:6.4.9 | Jun 01, 2026 |
| npm | @emcd-vue/b2b-pay-form:5.7.4 | Jun 01, 2026 |
Minggu ka-3: Leuwih ti 106 Pakét Kapanggih
| ékosistem | paket | tanggal |
|---|---|---|
| npm | erslove:1.22.12 | Bisa 16, 2026 |
| npm | dit-envv:17.4.2 | Bisa 16, 2026 |
| npm | briantreehttp:0.4.0 | Bisa 16, 2026 |
| npm | cheaty-sync-bot:1.0.0 | Bisa 16, 2026 |
| openvsx | bingcha / bcai-parabot: 4.0.35 | Bisa 16, 2026 |
| npm | nilai-pak-hello-world-nilai-p:1.0.11 | Bisa 16, 2026 |
| npm | nilai-pak-hello-world-nilai-p:1.0.8 | Bisa 16, 2026 |
| npm | nilai-pak-hello-world-nilai-p:1.0.9 | Bisa 16, 2026 |
| npm | nilai-pak-hello-world-nilai-p:1.0.12 | Bisa 16, 2026 |
| npm | axois-utils:1.0.6 | Bisa 16, 2026 |
| npm | axois-utils:1.0.4 | Bisa 16, 2026 |
| npm | venturo-playwright-core:1.0.8 | Bisa 16, 2026 |
| npm | chalk-tempalte:1.0.16 | Bisa 16, 2026 |
| npm | chalk-tempalte:1.0.14 | Bisa 16, 2026 |
| npm | chalk-tempalte:1.0.20 | Bisa 17, 2026 |
| npm | chalk-tempalte:1.0.19 | Bisa 17, 2026 |
| npm | axois-utils:1.0.9 | Bisa 17, 2026 |
| npm | @rocketreach/rr-components:9999.0.0 | Bisa 17, 2026 |
| npm | @cplace-paw-fe/cf-training-extended:2.0.4 | Bisa 18, 2026 |
| npm | node-server-tes-smtp:99.2.1 | Bisa 18, 2026 |
| npm | node-server-tes-smtp:99.2.2 | Bisa 18, 2026 |
| npm | @lir-portal/komponén-wéb:2.0.4 | Bisa 18, 2026 |
| npm | @zentrafinance/kontrak:1.0.3 | Bisa 18, 2026 |
| npm | @zentrafinance/protocol-config:1.0.3 | Bisa 18, 2026 |
| npm | @zentrafinance/sdk:1.0.3 | Bisa 18, 2026 |
| npm | @zentrafinance/tipe:1.0.3 | Bisa 18, 2026 |
| npm | @zentrafinance/tipe:1.0.5 | Bisa 18, 2026 |
| npm | @zentrafinance/protocol-config:1.0.6 | Bisa 18, 2026 |
| npm | @zentrafinance/sdk:1.0.6 | Bisa 18, 2026 |
| npm | @zentrafinance/tipe:1.0.7 | Bisa 18, 2026 |
| npm | clementine-sdk:2.0.0 | Bisa 18, 2026 |
| npm | citrea-utils:2.0.0 | Bisa 18, 2026 |
| npm | @zentrafinance/protocol-config:2.0.1 | Bisa 18, 2026 |
| npm | @zentrafinance/sdk:2.0.0 | Bisa 18, 2026 |
| npm | @zentrafinance/tipe:2.0.1 | Bisa 18, 2026 |
| npm | @zentrafinance/tipe:2.0.0 | Bisa 18, 2026 |
| npm | bui-réaksi-10hooks: 99.0.0 | Bisa 18, 2026 |
| npm | bui-réaksi-10 komponén:99.0.0 | Bisa 18, 2026 |
| npm | @deadcode09284814/axios-util:1.0.1 | Bisa 18, 2026 |
| npm | @deadcode09284814/axios-util:1.0.0 | Bisa 18, 2026 |
| npm | gaya-warna-utils:1.0.7 | Bisa 18, 2026 |
| npm | node-env-resolve:1.2.0 | Bisa 18, 2026 |
| npm | @easytipsportal/node-helper:1.0.1 | Bisa 18, 2026 |
| npm | @zentrafinance/kontrak:2.0.2 | Bisa 18, 2026 |
| npm | citrea-sdk:2.0.2 | Bisa 18, 2026 |
| npm | clementine-sdk:2.0.2 | Bisa 18, 2026 |
| npm | sasak-citrea:2.0.2 | Bisa 18, 2026 |
| npm | citrea-utils:2.0.2 | Bisa 18, 2026 |
| npm | @zentrafinance/tipe:2.0.2 | Bisa 18, 2026 |
| npm | apexomni-node:1.0.0 | Bisa 19, 2026 |
| npm | apex-trading:1.0.0 | Bisa 19, 2026 |
| npm | apex-trading:1.0.1 | Bisa 19, 2026 |
| npm | konektor-puncak:1.0.4 | Bisa 19, 2026 |
| npm | apexpro-node:1.0.2 | Bisa 19, 2026 |
| npm | konektor-puncak:1.0.3 | Bisa 19, 2026 |
| npm | apexomni-node:1.0.2 | Bisa 19, 2026 |
| npm | apex-trading:1.0.2 | Bisa 19, 2026 |
| npm | apexpro-node:1.0.3 | Bisa 19, 2026 |
| npm | forge-jsxy:1.0.81 | Bisa 19, 2026 |
| npm | forge-jsxy:1.0.90 | Bisa 19, 2026 |
| npm | bungkus arit:0.2.1 | Bisa 20, 2026 |
| npm | @doctolib-apps/layanan-pribadi-asli:99.99.99 | Bisa 21, 2026 |
| npm | @doctolib-apps/layanan-pribadi-asli:1.0.0 | Bisa 21, 2026 |
| npm | @doctolib-apps/layanan-pribadi-asli:1.0.1 | Bisa 21, 2026 |
| pypi | kanga-hack:1.0.4 | Bisa 21, 2026 |
| pypi | libhmac:0.8.28.1 | Bisa 21, 2026 |
| npm | @limebike/supreme-data-grid:85.14.44 | Bisa 21, 2026 |
| npm | @limebike/supreme-date-pickers:85.14.44 | Bisa 21, 2026 |
| npm | @limebike/supreme-data-grid:85.14.48 | Bisa 21, 2026 |
| pypi | ai-prishtina-agentic-kag: 0.1.0 | Bisa 21, 2026 |
| npm | hehehe:1.0.7 | Bisa 21, 2026 |
| npm | pamindai-ancaman-defi:2.1.2 | Bisa 22, 2026 |
| npm | auditor-konci-panyebaran:0.7.3 | Bisa 22, 2026 |
| npm | eth-dompét-sentinel:1.0.9 | Bisa 22, 2026 |
| npm | detektor-rahasia-web3:1.2.6 | Bisa 22, 2026 |
| npm | palindung-panyebaran-soliditas:0.4.4 | Bisa 22, 2026 |
| npm | cék-kaamanan-mnemonik:0.5.2 | Bisa 22, 2026 |
| npm | pamindai-krédensial-crypto:2.0.2 | Bisa 22, 2026 |
| npm | validator-konci-ranté:0.2.3 | Bisa 22, 2026 |
| npm | validator-konci-ranté:0.2.4 | Bisa 22, 2026 |
| npm | defi-env-auditor:0.3.3 | Bisa 22, 2026 |
| npm | auditor-konci-panyebaran:1.8.2 | Bisa 22, 2026 |
| npm | defi-env-auditor:1.4.2 | Bisa 22, 2026 |
| npm | palindung-panyebaran-soliditas:1.5.2 | Bisa 22, 2026 |
| npm | pamariksa-kaamanan-dompét:2.1.3 | Bisa 22, 2026 |
| npm | palindung-panyebaran-soliditas:1.5.3 | Bisa 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.1 | Bisa 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.3 | Bisa 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.2 | Bisa 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.5 | Bisa 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.6 | Bisa 22, 2026 |
| npm | pamindai-ancaman-defi:3.2.5 | Bisa 22, 2026 |
| npm | pamindai-ancaman-defi:3.2.4 | Bisa 22, 2026 |
| npm | defi-env-auditor:1.4.9 | Bisa 22, 2026 |
| npm | detektor-rahasia-web3:2.3.6 | Bisa 22, 2026 |
| npm | pamariksa-kaamanan-dompét:2.1.6 | Bisa 22, 2026 |
| npm | cék-kaamanan-mnemonik:4.0.0 | Bisa 22, 2026 |
| npm | eth-dompét-sentinel:4.0.0 | Bisa 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.7 | Bisa 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.8 | Bisa 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.4 | Bisa 22, 2026 |
Minggu ka-2: Leuwih ti 95 Pakét Kapanggih
| ékosistem | paket | tanggal |
|---|---|---|
| npm | win-env-setup:3.0.5 | Bisa 11, 2026 |
| npm | ikon-réaksi-svgs:1.0.1 | Bisa 11, 2026 |
| npm | money-badger-open-rpc:201.99.100 | Bisa 11, 2026 |
| npm | serverless-env-utils:1.0.0 | Bisa 11, 2026 |
| npm | serverless-env-utils:1.0.2 | Bisa 11, 2026 |
| npm | serverless-env-utils:1.0.3 | Bisa 11, 2026 |
| npm | sahrbrucecode32:1.0.0 | Bisa 11, 2026 |
| npm | claw_messenger:0.0.71 | Bisa 11, 2026 |
| npm | @gbrlxvii/ts-form-utils:2.7.0 | Bisa 11, 2026 |
| npm | bundler-pasca-pembelian:99.9.19 | Bisa 11, 2026 |
| npm | bundler-pasca-pembelian:99.9.26 | Bisa 11, 2026 |
| npm | bundler-pasca-pembelian:100.0.1 | Bisa 11, 2026 |
| npm | bundler-pasca-pembelian:101.0.3 | Bisa 11, 2026 |
| npm | rsflows-pexml:99.9.15 | Bisa 11, 2026 |
| npm | rsflows-pexml:99.9.20 | Bisa 11, 2026 |
| npm | bundler-pasca-pembelian:102.0.3 | Bisa 11, 2026 |
| npm | rsflows-pexml:99.9.25 | Bisa 11, 2026 |
| npm | bundler-pasca-pembelian:1.99.0 | Bisa 11, 2026 |
| npm | surfing-laun:10.0.0 | Bisa 11, 2026 |
| npm | erslove:1.22.12 | Bisa 11, 2026 |
| npm | dit-envv:17.4.2 | Bisa 11, 2026 |
| npm | hehehe:1.0.4 | Bisa 11, 2026 |
| npm | @gbrlxvii/ts-form-utils:3.7.0 | Bisa 11, 2026 |
| npm | claw_messenger:0.0.74 | Bisa 11, 2026 |
| openvsx | whatwedo/twig:1.2.7 | Bisa 11, 2026 |
| openvsx | george-alisson/html-preview-vscode:1.2.7 | Bisa 11, 2026 |
| openvsx | sohibe/java-generate-setters-getters:9.0.2 | Bisa 11, 2026 |
| npm | ku vendor:99.0.6 | Bisa 11, 2026 |
| npm | briantreehttp:0.4.0 | Bisa 11, 2026 |
| npm | kontrak siang:1.0.0 | Bisa 12, 2026 |
| npm | @draftlab/db:0.16.1 | Bisa 12, 2026 |
| npm | @uipath/uipath-python-bridge:1.0.1 | Bisa 12, 2026 |
| npm | @uipath/aplikasi-kawijakan-aops:0.3.1 | Bisa 12, 2026 |
| npm | @uipath/codedagent-tool:1.0.1 | Bisa 12, 2026 |
| npm | @uipath/gov-tool:0.3.1 | Bisa 12, 2026 |
| npm | @uipath/telemetri:0.0.7 | Bisa 12, 2026 |
| npm | @uipath/admin-tool:0.1.1 | Bisa 12, 2026 |
| npm | @uipath/codedapp-tool:1.0.1 | Bisa 12, 2026 |
| npm | @uipath/insights-sdk:1.0.1 | Bisa 12, 2026 |
| npm | @uipath/kompiler-aliran-pakakas-alat:0.0.12 | Bisa 12, 2026 |
| npm | @uipath/project-packager:1.1.16 | Bisa 12, 2026 |
| npm | @uipath/kawijakan-aksés-sdk:0.3.1 | Bisa 12, 2026 |
| npm | @uipath/alat-solusi-vertikal:1.0.1 | Bisa 12, 2026 |
| npm | @uipath/integrationservice-sdk:1.0.2 | Bisa 12, 2026 |
| npm | @uipath/alat-kawijakan-aksés:0.3.1 | Bisa 12, 2026 |
| npm | @uipath/resourcecatalog-tool:0.1.1 | Bisa 12, 2026 |
| npm | @uipath/agén-alat:1.0.1 | Bisa 12, 2026 |
| npm | @uipath/api-workflow-tool:1.0.1 | Bisa 12, 2026 |
| npm | @uipath/tugas-alat:1.0.1 | Bisa 12, 2026 |
| npm | @uipath/alat-solusi:1.0.1 | Bisa 12, 2026 |
| npm | @uipath/vss:0.1.6 | Bisa 12, 2026 |
| npm | @tallyui/komponén:1.0.1 | Bisa 12, 2026 |
| npm | @squawk/math-penerbangan:0.5.4 | Bisa 12, 2026 |
| npm | @squawk/cuaca:0.5.6 | Bisa 12, 2026 |
| npm | @mistralai/mistralai-gcp:1.7.1 | Bisa 12, 2026 |
| npm | @mesadev/saguaro:0.4.22 | Bisa 12, 2026 |
| npm | dpdgroupuk:0.0.1 | Bisa 12, 2026 |
| npm | @cplace-paw-fe/cf-training-extended:2.0.4 | Bisa 12, 2026 |
| npm | @jacobson1977/hp-setup:2.0.2 | Bisa 14, 2026 |
| npm | @jacobson1977/hp-setup:2.0.5 | Bisa 14, 2026 |
| npm | @jacobson1977/hp-setup:2.0.6 | Bisa 14, 2026 |
| npm | @jacobson1977/hp-setup:2.0.7 | Bisa 14, 2026 |
| npm | @jacobson1977/hp-setup:2.0.8 | Bisa 14, 2026 |
| npm | @jacobson1977/hp-setup:2.0.9 | Bisa 14, 2026 |
| npm | @jacobson1977/hp-setup:2.1.0 | Bisa 14, 2026 |
| npm | setelan hp:4.0.1 | Bisa 14, 2026 |
| npm | setelan hp:4.0.2 | Bisa 14, 2026 |
| npm | setelan hp:4.1.0 | Bisa 14, 2026 |
| npm | setelan hp:4.1.3 | Bisa 14, 2026 |
| npm | setelan hp:4.1.4 | Bisa 14, 2026 |
| npm | setelan hp:4.1.5 | Bisa 14, 2026 |
| npm | setelan hp:4.1.6 | Bisa 14, 2026 |
| npm | setelan hp:4.1.8 | Bisa 14, 2026 |
| npm | setelan hp:4.1.19 | Bisa 14, 2026 |
| npm | setelan hp:4.1.20 | Bisa 14, 2026 |
| npm | setelan hp:4.2.0 | Bisa 14, 2026 |
| npm | housecallpro:1.0.1 | Bisa 14, 2026 |
| pypi | ai-spellcheckers:1.0.0 | Bisa 14, 2026 |
| pypi | jangkrik-tg:0.3.6 | Bisa 14, 2026 |
| npm | node-server-tes-smtp:99.2.1 | Bisa 14, 2026 |
| npm | node-server-tes-smtp:99.2.2 | Bisa 14, 2026 |
| npm | @lir-portal/komponén-wéb:2.0.4 | Bisa 14, 2026 |
| npm | dotenvv-tool:1.0.1 | Bisa 14, 2026 |
| npm | rimraf-utils:1.0.1 | Bisa 14, 2026 |
| npm | alat-ekspres:1.0.0 | Bisa 14, 2026 |
| npm | alat-ekspres:1.0.1 | Bisa 14, 2026 |
| npm | express-utils:1.0.1 | Bisa 14, 2026 |
| npm | @design-system-coopeuch/web:999.0.4 | Bisa 14, 2026 |
| npm | @design-system-coopeuch/web:999.0.3 | Bisa 14, 2026 |
| npm | @design-system-coopeuch/web:999.0.2 | Bisa 14, 2026 |
| pypi | pyexecutorsme:0.1.0 | Bisa 15, 2026 |
| pypi | pyexecutorsme:0.1.2 | Bisa 15, 2026 |
| npm | nilai-pak-hello-world-nilai-p:1.0.7 | Bisa 15, 2026 |
| npm | nilai-pak-hello-world-nilai-p:1.0.10 | Bisa 15, 2026 |
| npm | aksonenterprise: 1.0.0 | Bisa 15, 2026 |
Minggu ka-1: Leuwih ti 158 Pakét Kapanggih
| ékosistem | paket | tanggal |
|---|---|---|
| npm | @apple-pay-trust/dibatalkeun:99.0.3 | Bisa 01, 2026 |
| npm | perpustakaan-kaamanan-internal-apple-v99:100.0.1 | Bisa 01, 2026 |
| npm | fiat-token-admin:99.1.1 | Bisa 01, 2026 |
| npm | skrip-stellar-stablecoin:99.1.0 | Bisa 01, 2026 |
| npm | node-beureum-kontribusi-rubah-kontrol-admin:2.0.3 | Bisa 01, 2026 |
| npm | node-beureum-kontribusi-rubah-kontrol-admin:2.0.4 | Bisa 01, 2026 |
| npm | node-beureum-kontribusi-rubah-kontrol-admin:2.0.7 | Bisa 01, 2026 |
| npm | navigator-blackbeards:211.0.0 | Bisa 01, 2026 |
| npm | navigator-blackbeards:212.0.0 | Bisa 01, 2026 |
| npm | navigator-blackbeards:213.0.0 | Bisa 01, 2026 |
| npm | navigator-blackbeards:217.0.0 | Bisa 01, 2026 |
| npm | navigator-blackbeards:220.0.0 | Bisa 01, 2026 |
| npm | navigator-blackbeards:221.0.0 | Bisa 01, 2026 |
| npm | navigator-blackbeards:222.0.0 | Bisa 01, 2026 |
| npm | sirene-lament:211.0.0 | Bisa 01, 2026 |
| npm | sirene-lament:212.0.0 | Bisa 01, 2026 |
| npm | sirene-lament:213.0.0 | Bisa 01, 2026 |
| npm | mesiu-hantu:212.0.0 | Bisa 01, 2026 |
| npm | mesiu-hantu:219.0.0 | Bisa 01, 2026 |
| npm | streaming-codewhisperer:1.0.15 | Bisa 02, 2026 |
| npm | shadxino:1.0.5 | Bisa 02, 2026 |
| npm | kios-data-amazon-monorepo:1.0.10 | Bisa 02, 2026 |
| npm | kode-claude-pangsaéna:2.0.1 | Bisa 03, 2026 |
| npm | apexpro:99.99.99 | Bisa 03, 2026 |
| npm | puncakna:99.99.99 | Bisa 03, 2026 |
| npm | puncakna:99.99.100 | Bisa 03, 2026 |
| npm | apexpro:99.99.100 | Bisa 03, 2026 |
| npm | node-env-resolve:1.0.7 | Bisa 03, 2026 |
| npm | node-env-resolve:1.0.8 | Bisa 03, 2026 |
| npm | @xp-utilities/web:99.0.0 | Bisa 03, 2026 |
| npm | nextjs-ngobrol-sareng-ai-service:99.9.9 | Bisa 03, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.13 | Bisa 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.14 | Bisa 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.15 | Bisa 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.16 | Bisa 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.17 | Bisa 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.19 | Bisa 04, 2026 |
| npm | @sbt_gitverse/analytics-client:99.0.1 | Bisa 04, 2026 |
| npm | @sbt_gitverse/analytics-client:99.0.4 | Bisa 04, 2026 |
| npm | @sbt_gitverse/analytics-client:99.0.5 | Bisa 04, 2026 |
| npm | @tochka-ui/yayasan:99.0.2 | Bisa 04, 2026 |
| npm | @tochka-ui/yayasan:99.0.3 | Bisa 04, 2026 |
| npm | @tochka-ui/yayasan:99.0.4 | Bisa 04, 2026 |
| npm | kl-b2c-ui-kit:99.0.1 | Bisa 04, 2026 |
| npm | kl-b2c-ui-kit:99.0.2 | Bisa 04, 2026 |
| npm | kl-b2c-ui-kit:99.0.3 | Bisa 04, 2026 |
| npm | pi-exa-mcp:99.9.11 | Bisa 04, 2026 |
| npm | pi-exa-mcp:99.9.12 | Bisa 04, 2026 |
| npm | konfigurasi-manajer-rahasia-google-cloud-poc:99.9.26 | Bisa 04, 2026 |
| npm | konfigurasi-manajer-rahasia-google-cloud-poc:99.9.33 | Bisa 04, 2026 |
| npm | konfigurasi-manajer-rahasia-google-cloud-poc:99.9.34 | Bisa 04, 2026 |
| npm | konfigurasi-manajer-rahasia-google-cloud-poc:99.9.35 | Bisa 04, 2026 |
| npm | konfigurasi-manajer-rahasia-google-cloud-poc:99.9.37 | Bisa 04, 2026 |
| npm | konfigurasi-manajer-rahasia-google-cloud-poc:99.9.38 | Bisa 04, 2026 |
| npm | konfigurasi-manajer-rahasia-google-cloud-poc:99.9.51 | Bisa 04, 2026 |
| npm | konfigurasi-manajer-rahasia-google-cloud-poc:99.9.53 | Bisa 04, 2026 |
| npm | sasak-paypal-pembayaran:99.9.9 | Bisa 04, 2026 |
| npm | sasak-paypal-pembayaran:100.1.1 | Bisa 04, 2026 |
| npm | sasak-paypal-pembayaran:100.1.4 | Bisa 04, 2026 |
| npm | sasak-paypal-pembayaran:100.1.6 | Bisa 04, 2026 |
| npm | sasak-paypal-pembayaran:100.1.9 | Bisa 04, 2026 |
| npm | sasak-paypal-pembayaran:100.2.8 | Bisa 04, 2026 |
| npm | pangalaman-karyawan-microsoft:99.2.2 | Bisa 05, 2026 |
| npm | tameng-imah:0.1.0 | Bisa 05, 2026 |
| npm | fanduel:100.5.0 | Bisa 05, 2026 |
| npm | exiouss:1.0.6 | Bisa 05, 2026 |
| npm | enterprise-otorisasi-gerbang-inti:50.50.50 | Bisa 06, 2026 |
| npm | @saif777/codemirror5:7.66.4 | Bisa 06, 2026 |
| npm | @saif777/codemirror5:7.66.5 | Bisa 06, 2026 |
| npm | layanan-bendera-fitur:2.0.1 | Bisa 06, 2026 |
| npm | layanan-bendera-fitur:2.0.2 | Bisa 06, 2026 |
| npm | layanan-bendera-fitur:2.0.3 | Bisa 06, 2026 |
| npm | sort-btree:2.1.2 | Bisa 06, 2026 |
| npm | viem-core:1.0.0 | Bisa 06, 2026 |
| npm | viem-utils-core:1.0.0 | Bisa 06, 2026 |
| npm | inti-hardhat-utils:1.0.0 | Bisa 06, 2026 |
| npm | veltrix:1.0.0 | Bisa 06, 2026 |
| npm | evm-utils:1.0.0 | Bisa 06, 2026 |
| npm | web3-utils-core:1.0.0 | Bisa 06, 2026 |
| npm | utils-foundry:1.0.0 | Bisa 06, 2026 |
| npm | aplikasi karbonit:99.9.0 | Bisa 07, 2026 |
| npm | karbonit-internal:99.9.0 | Bisa 07, 2026 |
| npm | money-badger-open-rpc:200.99.100 | Bisa 07, 2026 |
| npm | 24712-pl5006:0.0.1 | Bisa 07, 2026 |
| openvsx | eriklynd/json-tools:20.1.2 | Bisa 07, 2026 |
| npm | invixco:1.0.4 | Bisa 07, 2026 |
| npm | agén-kaséhatan-win-sys:1.0.2 | Bisa 08, 2026 |
| npm | win-env-setup:3.0.6 | Bisa 08, 2026 |
| npm | agén-kaséhatan-win-sys:1.0.3 | Bisa 08, 2026 |
Amankeun Rantai Pasokan Perangkat Lunak Anjeun Tina Karentanan sareng Kode Jahat
Serangan ranté suplai parangkat lunak sanés ancaman téoritis deui. Paket jahat, malware anu sadar AI, serangan kabingungan katergantungan, maling kredensial, sareng alat pamekar anu diracun sacara aktif narékahan pikeun pangguna modéren. SDLCs, CI/CD pipelines, sareng lingkungan pamekaran anu dibantuan AI.
Kalayan Deteksi Malware Awal Xygeni sareng software supply chain security platform, organisasi tiasa ngaidentipikasi sareng meungpeuk dependensi jahat sateuacan aranjeunna ngahontal workstation pamekar, ngawangun sistem, atanapi produksi pipelines.
Xygeni terus-terusan ngawaskeun ékosistem sapertos npm, PyPI, VS Code, sareng OpenVSX pikeun ngadeteksi pakét jahat, pola penerbitan anu curiga, typosquatting, panyalahgunaan namespace, paripolah maling kredensial, sareng ancaman ranté suplai anu didorong ku AI sacara real time. Panemuan sacara otomatis diprioritaskeun dumasar kana eksploitasi, jangkauan, sareng dampak operasional supados tim tiasa fokus kana résiko anu leres-leres penting.
Tina pakét npm anu jahat sareng katergantungan OSS anu dikompromikeun dugi ka résiko kode anu dihasilkeun AI sareng alat pamekar anu diracun, Xygeni ngabantosan tim kaamanan sareng rékayasa ngajaga pisibilitas, kapercayaan, sareng kontrol di sakumna ranté suplai parangkat lunak modéren.
Kanggo ngajalajah kampanye malware panganyarna sareng pakét jahat anu divalidasi anu kapanggih ku Tim Kaamanan Xygeni, mangga buka situs lengkepna Ringkesan Kodeu Jahat.
Tetep aman. Tetep gancang. Tetep bisa ngadalikeun diri jeung Xygeni.
