Xygeni Malicious Code Digest jurnalining may oyi soniga xush kelibsiz. Bu oyda bizning xavfsizlik bo'yicha tadqiqot guruhimiz ommaviy paket registrlari, ishlab chiquvchilar uchun vositalar, AI yordamidagi ish oqimlari va zamonaviy dasturiy ta'minot ta'minoti zanjiri tahdidlarining o'zgaruvchan manzarasini kuzatishda davom etdi. CI/CD muhitlar. May oyi davomida Xygeni npm, PyPI, VS Code va OpenVSX ekotizimlariga qaratilgan yuzlab zararli paketlarni aniqladi va tasdiqladi.
Lekin may oyi nafaqat hajm bilan bog'liq edi. Bu oyda hujumchilar o'z savdolarini sun'iy intellektga asoslangan ishlab chiqish muhitlariga, ishlab chiquvchilar ishonchi haqidagi taxminlarga va avtomatlashtirilgan tizimlarga tobora ko'proq moslashtirgan oy bo'ldi. pipelines.
Xygeni xavfsizlik guruhi tomonidan shu oyda e'lon qilingan eng diqqatga sazovor tergovlar orasida:
- JulesJacker, Google’ning Jules AI agenti sifatida o‘zini taqlid qilib, omborlarni o‘g‘irlash va suiiste’mol qilish uchun ko‘p bosqichli npm zararli dasturlar kampaniyasi CI/CD muhitlar va hatto uni tahlil qiluvchi sinov muhitini ham nishonga olish. Kampaniya shifrlangan xost-gate yuklovchilarni taqdim etdi, soxtalashtirilgan
google-labs-jules[bot]commits, bulutli metama'lumotlarni o'g'irlash va Kubernetes tahlil infratuzilmasining o'ziga qarshi razvedkasi. - PhantomBot, soxta hamyon, blokcheyn va Web3 vositalaridan foydalanib, hisob ma'lumotlarini o'g'irlash, ishlab chiquvchilar muhitini buzish va qaramlikni suiiste'mol qilish va bosqichma-bosqich yuklamalarni yetkazib berish orqali kripto bilan bog'liq ish oqimlarini nishonga olish uchun zararli npm kampaniyasi.
- Barmoq izlari muhitini yo'qotish, hisob ma'lumotlarini eksfiltrlash, barqarorlikni joylashtirish va ishlab chiquvchilar tizimlarini buzish uchun soxta TypeScript yordamchi dasturlari, AI mavzusidagi paketlar, ichki vositalarni taqlid qilish, frontend kutubxonalari, bulut yordamchilari va quruvchi freymvorklaridan foydalanadigan keng ko'lamli zararli npm ekotizimi.
- Ishlab chiquvchilar ishonch evristikasini chetlab o'tish va zamonaviy texnologiyalarni buzish uchun mo'ljallangan qaramlik chalkashliklari, xatolarni tuzatish, o'rnatishdan keyingi suiiste'mollik, AI vositalarini taqlid qilish, versiyalarni ko'paytirish va nom maydonini takroriy suiiste'mol qilishdan foydalanadigan zararli paketlarning davom etayotgan to'lqinlari. SDLC aniqlashdan oldin ish jarayonlari.
- kabi platformalararo zararli dasturlarning kashf etilishi
@jaggle/resizeobservesLinux, macOS va Windows tizimlarida Python asosidagi qat'iylik va kripto-hamyon buferini almashtirishni joriy etish bilan birga qonuniy paketni taqlid qilgan clipboard hijacker.
Oy davomida biz AI vositalari, ochiq kodli ekotizimlar va dasturiy ta'minot ta'minot zanjiri hujumlari o'rtasidagi tobora ortib borayotgan yaqinlashuvni ham kuzatdik. Tahdid sub'ektlari tobora ko'proq AI yordamida ishlab chiqish ish oqimlari, agent muhitlari, qo'shimcha sinovlar va bulutga asoslangan tuzilmalarni nishonga olishdi. pipelines kengroq hisobga olish ma'lumotlarini o'g'irlash va omborni buzish operatsiyalarining bir qismi sifatida.
Bu hujumlar endi oddiy matn terish xatolarining alohida holatlari emas. Ular muvofiqlashtirilgan nashriyot kampaniyalari, avtomatlashtirilgan versiya portlashlari, bulutli tokenlarni o'g'irlash va boshqalarni o'z ichiga oladi. CI/CD suiiste'mol qilish, shifrlangan foydali yuklamalarni bosqichma-bosqich joylashtirish, sinov muhitidan qochish va ishonchli ishlab chiquvchilar ekotizimlariga moslashish uchun maxsus ishlab chiqilgan doimiy murosaga kelish usullari.
Ushbu oylik yangilanish Xygeni kompaniyasining zararli dasturlar va ta'minot zanjiri tahdidlarini tadqiq qilish bo'yicha davom etayotgan tashabbusining bir qismi bo'lib, unda bizning jamoamiz zararli paketlarni doimiy ravishda tekshiradi, paydo bo'layotgan hujum naqshlarini o'rganadi va xavfsizlik, AppSec va DevSecOps jamoalariga rivojlanayotgan ta'minot zanjiri xavfidan oldinda bo'lishga yordam berish uchun amaliy ma'lumotlarni nashr etadi.
Ushbu oyda nashr etilgan har bir zararli paket, zararli dasturiy ta'minot kampaniyasi va tahdidlar tahlili bo'yicha to'liq ma'lumot olish uchun Xygeni xavfsizlik guruhining may oyidagi zararli kodlar dayjestini va unga tegishli tadqiqotlarni ko'rib chiqing.
4-hafta: 104 dan ortiq posilka topildi
| Ekosistema | To'plam | sana |
|---|---|---|
| npm | @gbrlxvii/ts-form-utils:4.6.0 | , 25 2026 mumkin |
| npm | @gbrlxvii/ts-form-utils:4.7.0 | , 25 2026 mumkin |
| npm | pi-ocr:0.2.0 | , 25 2026 mumkin |
| npm | @jaggle/resizeobserves:1.0.11 | , 25 2026 mumkin |
| npm | fnd-do'konlar: 0.0.7 | , 25 2026 mumkin |
| npm | @gbrlxvii/ts-project-lint:1.7.0 | , 25 2026 mumkin |
| npm | @gbrlxvii/ts-project-lint:1.8.0 | , 25 2026 mumkin |
| npm | tizim-foydalanuvchi-identifikatori-cli:7.0.0 | , 26 2026 mumkin |
| npm | @jaggle/resizeobserves:1.0.13 | , 26 2026 mumkin |
| npm | @jaggle/resizeobserves:1.0.12 | , 26 2026 mumkin |
| npm | @jaggle/resizeobserves:1.0.15 | , 26 2026 mumkin |
| npm | @jaggle/resizeobserves:1.0.14 | , 26 2026 mumkin |
| npm | @jaggle/resizeobserves:1.0.16 | , 26 2026 mumkin |
| npm | @jaggle/resizeobserves:1.0.19 | , 26 2026 mumkin |
| npm | @jaggle/resizeobserves:1.0.17 | , 26 2026 mumkin |
| npm | @jaggle/resizeobserves:1.0.18 | , 26 2026 mumkin |
| npm | @jaggle/resizeobserves:1.0.20 | , 26 2026 mumkin |
| npm | xalqaro reklamalar: 99.0.1 | , 26 2026 mumkin |
| npm | tempo-layout: 99.0.0 | , 26 2026 mumkin |
| npm | tempo-layout: 99.0.2 | , 26 2026 mumkin |
| npm | itc-actors-api:99.0.0 | , 26 2026 mumkin |
| npm | Walmart-birgalikda ishlatiladigan modullar: 99.0.1 | , 26 2026 mumkin |
| npm | wml-komponentlari: 99.0.1 | , 26 2026 mumkin |
| npm | platforma tempi: 99.0.1 | , 26 2026 mumkin |
| npm | wml-yadrosi: 99.0.1 | , 26 2026 mumkin |
| npm | @izumiswap/sdk:3.0.3 | , 26 2026 mumkin |
| npm | @izumiswap/sdk:3.0.4 | , 26 2026 mumkin |
| npm | @izumiswap/sdk:3.0.5 | , 26 2026 mumkin |
| npm | json-dan-simple-graphql-schema-ga:1.0.0 | , 26 2026 mumkin |
| npm | reaktiv-cdk-ilova: 1.0.1 | , 27 2026 mumkin |
| npm | mmt-statik: 1.0.0 | , 27 2026 mumkin |
| npm | reaktiv-cdk-ilova: 1.0.4 | , 27 2026 mumkin |
| npm | cdk-sagemaker-notebook-ish jarayoni: 1.0.3 | , 27 2026 mumkin |
| npm | kashfiyot-qurish: 1.0.0 | , 27 2026 mumkin |
| pypi | worldofkanga:1.0.4 | , 27 2026 mumkin |
| npm | forge-jsxy:1.0.92 | , 27 2026 mumkin |
| npm | @gs-select/savings-client-application:99.0.0 | , 27 2026 mumkin |
| npm | forge-jsxy:1.0.105 | , 27 2026 mumkin |
| npm | forge-jsxy:1.0.107 | , 27 2026 mumkin |
| npm | forge-jsxy:1.0.108 | , 27 2026 mumkin |
| npm | tahririyat-mse-autentifikatsiya-ui:99.0.1 | , 28 2026 mumkin |
| npm | tahririyat kodi: 99.0.1 | , 28 2026 mumkin |
| npm | mse-vosita-komponentlari: 99.99.100 | , 28 2026 mumkin |
| npm | forge-jsxy:1.0.120 | , 28 2026 mumkin |
| npm | @gbrlxvi/ts-form-utils:1.0.0 | , 29 2026 mumkin |
| vscode | rudranex-ishlab chiquvchi-yordamchisi: 1.0.1 | , 29 2026 mumkin |
| npm | nemo-reportyor: 1.8.2 | , 29 2026 mumkin |
| npm | @qlab/ui:2.0.5 | , 29 2026 mumkin |
| npm | forge-jsxy:1.0.121 | , 29 2026 mumkin |
| npm | @qlab/ui:2.0.6 | , 29 2026 mumkin |
| npm | @qlab/komponent-razvedka:2.0.6 | , 29 2026 mumkin |
| npm | qidiruv tizimini sozlash: 1.0.9106 | , 29 2026 mumkin |
| npm | opensearch-sozlash-vositasi: 1.0.9107 | , 29 2026 mumkin |
| npm | @0xlr/vercel-analitikasi:999.0.0 | , 29 2026 mumkin |
| npm | @0xlr/stripe-frontend:999.0.0 | , 29 2026 mumkin |
| npm | @0xlr/stripe-checkout-js:999.0.0 | , 29 2026 mumkin |
| npm | @0xlr/sentry-web:999.0.0 | , 29 2026 mumkin |
| npm | @0xlr/clerk-auth:999.0.0 | , 29 2026 mumkin |
| npm | @0xlr/supabase-db:999.0.0 | , 29 2026 mumkin |
| npm | @0xlr/prisma-client-js:999.0.0 | , 29 2026 mumkin |
| npm | @flexspec/cli:0.3.1-dev.26612027722 | , 29 2026 mumkin |
| npm | @cloudplatform-single-spa/administration: 99.99.100 | , 30 2026 mumkin |
| npm | @cloudplatform-single-spa/svp-s3-storage:99.99.100 | , 30 2026 mumkin |
| npm | @maximvs1538/os-npm:99.0.0 | , 30 2026 mumkin |
| npm | @easy-entry/landing-routes:99.9.5 | , 30 2026 mumkin |
| npm | @easy-entry/outside-registration-fop-navigator:99.9.5 | , 30 2026 mumkin |
| npm | @easy-entry/marshrutlar:99.9.5 | , 30 2026 mumkin |
| npm | cms-github:4.2.4 | , 30 2026 mumkin |
| npm | @t-in-one/shakl_mahsulot_token:5.7.1 | , 30 2026 mumkin |
| npm | @capibar.chat/ui-kit:99.5.7 | , 30 2026 mumkin |
| npm | cms-helpgit:4.2.6 | , 30 2026 mumkin |
| npm | cms-helpgit:4.2.8 | , 30 2026 mumkin |
| vscode | xampp-menejeri: 5.1.3 | , 30 2026 mumkin |
| npm | @chat-shabloni/auth:1.0.0 | , 31 2026 mumkin |
| npm | cms-storehub:1.3.4 | , 31 2026 mumkin |
| npm | cms-storehub:1.3.5 | , 31 2026 mumkin |
| npm | chakana savdo-joylashuv-strategiyasi-frontend: 1.1.1 | , 31 2026 mumkin |
| npm | chakana savdo-joylashuv-strategiyasi-frontend: 1.1.2 | , 31 2026 mumkin |
| npm | cms-storehub:1.3.6 | , 31 2026 mumkin |
| pypi | simtooreal-cli:0.3.0 | Jun 01, 2026 |
| npm | suhbat-sdk:2.0.2 | Jun 01, 2026 |
| npm | veltriks:9.0.0 | Jun 01, 2026 |
| npm | jingmeideshishi: 1.0.4 | Jun 01, 2026 |
| npm | @tse-raqamli/yadro:99.0.0 | Jun 01, 2026 |
| npm | @telenor-se/core:99.0.0 | Jun 01, 2026 |
| npm | @ownit/core:99.0.0 | Jun 01, 2026 |
| npm | jingmeideshishi: 1.0.5 | Jun 01, 2026 |
| npm | bemor hujjatlari: 75.0.0 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.69 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.68 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.82 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.80 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.81 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.83 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.3 | Jun 01, 2026 |
| npm | veltriks:9.0.1 | Jun 01, 2026 |
| npm | @emcd-vue/auth:6.4.9 | Jun 01, 2026 |
| npm | @emcd-vue/b2b-to'lov shakli: 5.7.4 | Jun 01, 2026 |
3-hafta: 106 dan ortiq posilka topildi
| Ekosistema | To'plam | sana |
|---|---|---|
| npm | erslove:1.22.12 | , 16 2026 mumkin |
| npm | dit-envv:17.4.2 | , 16 2026 mumkin |
| npm | briantreehttp:0.4.0 | , 16 2026 mumkin |
| npm | cheaty-sync-bot:1.0.0 | , 16 2026 mumkin |
| openvsx | Bingcha/bcai-vositalari: 4.0.35 | , 16 2026 mumkin |
| npm | salom-dunyo-pkg-qiymati-qiymati-p:1.0.11 | , 16 2026 mumkin |
| npm | salom-dunyo-pkg-qiymati-qiymati-p:1.0.8 | , 16 2026 mumkin |
| npm | salom-dunyo-pkg-qiymati-qiymati-p:1.0.9 | , 16 2026 mumkin |
| npm | salom-dunyo-pkg-qiymati-qiymati-p:1.0.12 | , 16 2026 mumkin |
| npm | axois-utils:1.0.6 | , 16 2026 mumkin |
| npm | axois-utils:1.0.4 | , 16 2026 mumkin |
| npm | Venturo-dramaturg-yadrosi: 1.0.8 | , 16 2026 mumkin |
| npm | chal-tempalte:1.0.16 | , 16 2026 mumkin |
| npm | chal-tempalte:1.0.14 | , 16 2026 mumkin |
| npm | chal-tempalte:1.0.20 | , 17 2026 mumkin |
| npm | chal-tempalte:1.0.19 | , 17 2026 mumkin |
| npm | axois-utils:1.0.9 | , 17 2026 mumkin |
| npm | @rocketreach/rr-komponentlari:9999.0.0 | , 17 2026 mumkin |
| npm | @cplace-paw-fe/cf-training-extended:2.0.4 | , 18 2026 mumkin |
| npm | smtp-test-server-tugun: 99.2.1 | , 18 2026 mumkin |
| npm | smtp-test-server-tugun: 99.2.2 | , 18 2026 mumkin |
| npm | @lir-portal/veb-komponentlar: 2.0.4 | , 18 2026 mumkin |
| npm | @zentrafinance/shartnomalar: 1.0.3 | , 18 2026 mumkin |
| npm | @zentrafinance/protocol-config:1.0.3 | , 18 2026 mumkin |
| npm | @zentrafinance/sdk:1.0.3 | , 18 2026 mumkin |
| npm | @zentrafinance/turlari: 1.0.3 | , 18 2026 mumkin |
| npm | @zentrafinance/turlari: 1.0.5 | , 18 2026 mumkin |
| npm | @zentrafinance/protocol-config:1.0.6 | , 18 2026 mumkin |
| npm | @zentrafinance/sdk:1.0.6 | , 18 2026 mumkin |
| npm | @zentrafinance/turlari: 1.0.7 | , 18 2026 mumkin |
| npm | clementine-sdk:2.0.0 | , 18 2026 mumkin |
| npm | citrea-utils:2.0.0 | , 18 2026 mumkin |
| npm | @zentrafinance/protocol-config:2.0.1 | , 18 2026 mumkin |
| npm | @zentrafinance/sdk:2.0.0 | , 18 2026 mumkin |
| npm | @zentrafinance/turlari: 2.0.1 | , 18 2026 mumkin |
| npm | @zentrafinance/turlari: 2.0.0 | , 18 2026 mumkin |
| npm | bui-reaksiya-10hooks: 99.0.0 | , 18 2026 mumkin |
| npm | bui-reaksiya-10 komponent: 99.0.0 | , 18 2026 mumkin |
| npm | @deadcode09284814/axios-util:1.0.1 | , 18 2026 mumkin |
| npm | @deadcode09284814/axios-util:1.0.0 | , 18 2026 mumkin |
| npm | rang uslubidagi vositalar: 1.0.7 | , 18 2026 mumkin |
| npm | tugun-muhit-hal qilish: 1.2.0 | , 18 2026 mumkin |
| npm | @easytipsportal/node-helper:1.0.1 | , 18 2026 mumkin |
| npm | @zentrafinance/shartnomalar: 2.0.2 | , 18 2026 mumkin |
| npm | citrea-sdk:2.0.2 | , 18 2026 mumkin |
| npm | clementine-sdk:2.0.2 | , 18 2026 mumkin |
| npm | citrea-ko'prik: 2.0.2 | , 18 2026 mumkin |
| npm | citrea-utils:2.0.2 | , 18 2026 mumkin |
| npm | @zentrafinance/turlari: 2.0.2 | , 18 2026 mumkin |
| npm | apexomni-tugun: 1.0.0 | , 19 2026 mumkin |
| npm | apex-savdo: 1.0.0 | , 19 2026 mumkin |
| npm | apex-savdo: 1.0.1 | , 19 2026 mumkin |
| npm | apex-ulagichi: 1.0.4 | , 19 2026 mumkin |
| npm | apexpro-tugun: 1.0.2 | , 19 2026 mumkin |
| npm | apex-ulagichi: 1.0.3 | , 19 2026 mumkin |
| npm | apexomni-tugun: 1.0.2 | , 19 2026 mumkin |
| npm | apex-savdo: 1.0.2 | , 19 2026 mumkin |
| npm | apexpro-tugun: 1.0.3 | , 19 2026 mumkin |
| npm | forge-jsxy:1.0.81 | , 19 2026 mumkin |
| npm | forge-jsxy:1.0.90 | , 19 2026 mumkin |
| npm | o'roq o'rash mashinasi: 0.2.1 | , 20 2026 mumkin |
| npm | @doctolib-apps/native-personalized-services:99.99.99 | , 21 2026 mumkin |
| npm | @doctolib-apps/native-personalized-services:1.0.0 | , 21 2026 mumkin |
| npm | @doctolib-apps/native-personalized-services:1.0.1 | , 21 2026 mumkin |
| pypi | kanga-hack:1.0.4 | , 21 2026 mumkin |
| pypi | libhmac:0.8.28.1 | , 21 2026 mumkin |
| npm | @limebike/supreme-data-grid:85.14.44 | , 21 2026 mumkin |
| npm | @limebike/supreme-date-pickers:85.14.44 | , 21 2026 mumkin |
| npm | @limebike/supreme-data-grid:85.14.48 | , 21 2026 mumkin |
| pypi | ai-prishtina-agent-kag: 0.1.0 | , 21 2026 mumkin |
| npm | hehehe:1.0.7 | , 21 2026 mumkin |
| npm | defi-tahdid-skaner: 2.1.2 | , 22 2026 mumkin |
| npm | joylashtirish-kalit-auditor: 0.7.3 | , 22 2026 mumkin |
| npm | eth-hamyon-sentinel:1.0.9 | , 22 2026 mumkin |
| npm | web3-sirlarni aniqlovchi: 1.2.6 | , 22 2026 mumkin |
| npm | mustahkamlik-joylashtirish-qo'riqchi: 0.4.4 | , 22 2026 mumkin |
| npm | mnemonic-xavfsizlik-tekshiruvi: 0.5.2 | , 22 2026 mumkin |
| npm | kripto-hisob ma'lumotlari skaneri: 2.0.2 | , 22 2026 mumkin |
| npm | zanjir-kalit-validator: 0.2.3 | , 22 2026 mumkin |
| npm | zanjir-kalit-validator: 0.2.4 | , 22 2026 mumkin |
| npm | defi-env-auditor:0.3.3 | , 22 2026 mumkin |
| npm | joylashtirish-kalit-auditor: 1.8.2 | , 22 2026 mumkin |
| npm | defi-env-auditor:1.4.2 | , 22 2026 mumkin |
| npm | mustahkamlik-joylashtirish-qo'riqchi: 1.5.2 | , 22 2026 mumkin |
| npm | hamyon xavfsizligi tekshiruvchisi: 2.1.3 | , 22 2026 mumkin |
| npm | mustahkamlik-joylashtirish-qo'riqchi: 1.5.3 | , 22 2026 mumkin |
| npm | @jaggle/resizeobserves:1.0.1 | , 22 2026 mumkin |
| npm | @jaggle/resizeobserves:1.0.3 | , 22 2026 mumkin |
| npm | @jaggle/resizeobserves:1.0.2 | , 22 2026 mumkin |
| npm | @jaggle/resizeobserves:1.0.5 | , 22 2026 mumkin |
| npm | @jaggle/resizeobserves:1.0.6 | , 22 2026 mumkin |
| npm | defi-tahdid-skaner: 3.2.5 | , 22 2026 mumkin |
| npm | defi-tahdid-skaner: 3.2.4 | , 22 2026 mumkin |
| npm | defi-env-auditor:1.4.9 | , 22 2026 mumkin |
| npm | web3-sirlarni aniqlovchi: 2.3.6 | , 22 2026 mumkin |
| npm | hamyon xavfsizligi tekshiruvchisi: 2.1.6 | , 22 2026 mumkin |
| npm | mnemonic-xavfsizlik-tekshiruvi: 4.0.0 | , 22 2026 mumkin |
| npm | eth-hamyon-sentinel:4.0.0 | , 22 2026 mumkin |
| npm | @jaggle/resizeobserves:1.0.7 | , 22 2026 mumkin |
| npm | @jaggle/resizeobserves:1.0.8 | , 22 2026 mumkin |
| npm | @jaggle/resizeobserves:1.0.4 | , 22 2026 mumkin |
2-hafta: 95 dan ortiq posilka topildi
| Ekosistema | To'plam | sana |
|---|---|---|
| npm | win-env-sozlash: 3.0.5 | , 11 2026 mumkin |
| npm | reaksiya belgisi-svgs:1.0.1 | , 11 2026 mumkin |
| npm | pul-bo'rsiq-ochiq-rpc:201.99.100 | , 11 2026 mumkin |
| npm | serversiz-env-utils:1.0.0 | , 11 2026 mumkin |
| npm | serversiz-env-utils:1.0.2 | , 11 2026 mumkin |
| npm | serversiz-env-utils:1.0.3 | , 11 2026 mumkin |
| npm | sahrbrucecode32:1.0.0 | , 11 2026 mumkin |
| npm | claw_messenger:0.0.71 | , 11 2026 mumkin |
| npm | @gbrlxvii/ts-form-utils:2.7.0 | , 11 2026 mumkin |
| npm | Xariddan keyingi to'plam: 99.9.19 | , 11 2026 mumkin |
| npm | Xariddan keyingi to'plam: 99.9.26 | , 11 2026 mumkin |
| npm | Xariddan keyingi to'plam: 100.0.1 | , 11 2026 mumkin |
| npm | Xariddan keyingi to'plam: 101.0.3 | , 11 2026 mumkin |
| npm | rsflows-pexml:99.9.15 | , 11 2026 mumkin |
| npm | rsflows-pexml:99.9.20 | , 11 2026 mumkin |
| npm | Xariddan keyingi to'plam: 102.0.3 | , 11 2026 mumkin |
| npm | rsflows-pexml:99.9.25 | , 11 2026 mumkin |
| npm | Xariddan keyingi to'plam: 1.99.0 | , 11 2026 mumkin |
| npm | sekin surf: 10.0.0 | , 11 2026 mumkin |
| npm | erslove:1.22.12 | , 11 2026 mumkin |
| npm | dit-envv:17.4.2 | , 11 2026 mumkin |
| npm | hehehe:1.0.4 | , 11 2026 mumkin |
| npm | @gbrlxvii/ts-form-utils:3.7.0 | , 11 2026 mumkin |
| npm | claw_messenger:0.0.74 | , 11 2026 mumkin |
| openvsx | whatwedo/twig:1.2.7 | , 11 2026 mumkin |
| openvsx | george-alisson/html-oldindan ko'rish-vscode:1.2.7 | , 11 2026 mumkin |
| openvsx | sohibe/java-generate-setters-getters:9.0.2 | , 11 2026 mumkin |
| npm | sotuvchilar tomonidan: 99.0.6 | , 11 2026 mumkin |
| npm | briantreehttp:0.4.0 | , 11 2026 mumkin |
| npm | peshin shartnomalari: 1.0.0 | , 12 2026 mumkin |
| npm | @draftlab/db:0.16.1 | , 12 2026 mumkin |
| npm | @uipath/uipath-python-bridge: 1.0.1 | , 12 2026 mumkin |
| npm | @uipath/aops-policy-vositasi:0.3.1 | , 12 2026 mumkin |
| npm | @uipath/codedagent-vosita:1.0.1 | , 12 2026 mumkin |
| npm | @uipath/gov-vositasi:0.3.1 | , 12 2026 mumkin |
| npm | @uipath/telemetriya:0.0.7 | , 12 2026 mumkin |
| npm | @uipath/admin-vosita:0.1.1 | , 12 2026 mumkin |
| npm | @uipath/codedapp-vositasi:1.0.1 | , 12 2026 mumkin |
| npm | @uipath/insights-sdk:1.0.1 | , 12 2026 mumkin |
| npm | @uipath/vosita-ish oqimi kompilyatori: 0.0.12 | , 12 2026 mumkin |
| npm | @uipath/loyiha-paketchi:1.1.16 | , 12 2026 mumkin |
| npm | @uipath/access-policy-sdk:0.3.1 | , 12 2026 mumkin |
| npm | @uipath/vertical-solutions-vositasiga: 1.0.1 | , 12 2026 mumkin |
| npm | @uipath/integrationservice-sdk:1.0.2 | , 12 2026 mumkin |
| npm | @uipath/access-policy-vositasi:0.3.1 | , 12 2026 mumkin |
| npm | @uipath/resourcecatalog-vosita:0.1.1 | , 12 2026 mumkin |
| npm | @uipath/agent-vositasi: 1.0.1 | , 12 2026 mumkin |
| npm | @uipath/api-workflow-vositalari:1.0.1 | , 12 2026 mumkin |
| npm | @uipath/vazifalar vositasi: 1.0.1 | , 12 2026 mumkin |
| npm | @uipath/yechim vositasi: 1.0.1 | , 12 2026 mumkin |
| npm | @uipath/vss:0.1.6 | , 12 2026 mumkin |
| npm | @tallyui/komponentlar: 1.0.1 | , 12 2026 mumkin |
| npm | @squawk/flight-math:0.5.4 | , 12 2026 mumkin |
| npm | @squawk/weather:0.5.6 | , 12 2026 mumkin |
| npm | @mistralai/mistralai-gcp:1.7.1 | , 12 2026 mumkin |
| npm | @mesadev/saguaro:0.4.22 | , 12 2026 mumkin |
| npm | dpdgroupuk:0.0.1 | , 12 2026 mumkin |
| npm | @cplace-paw-fe/cf-training-extended:2.0.4 | , 12 2026 mumkin |
| npm | @jacobson1977/hp-sozlash: 2.0.2 | , 14 2026 mumkin |
| npm | @jacobson1977/hp-sozlash: 2.0.5 | , 14 2026 mumkin |
| npm | @jacobson1977/hp-sozlash: 2.0.6 | , 14 2026 mumkin |
| npm | @jacobson1977/hp-sozlash: 2.0.7 | , 14 2026 mumkin |
| npm | @jacobson1977/hp-sozlash: 2.0.8 | , 14 2026 mumkin |
| npm | @jacobson1977/hp-sozlash: 2.0.9 | , 14 2026 mumkin |
| npm | @jacobson1977/hp-sozlash: 2.1.0 | , 14 2026 mumkin |
| npm | hpsetup:4.0.1 | , 14 2026 mumkin |
| npm | hpsetup:4.0.2 | , 14 2026 mumkin |
| npm | hpsetup:4.1.0 | , 14 2026 mumkin |
| npm | hpsetup:4.1.3 | , 14 2026 mumkin |
| npm | hpsetup:4.1.4 | , 14 2026 mumkin |
| npm | hpsetup:4.1.5 | , 14 2026 mumkin |
| npm | hpsetup:4.1.6 | , 14 2026 mumkin |
| npm | hpsetup:4.1.8 | , 14 2026 mumkin |
| npm | hpsetup:4.1.19 | , 14 2026 mumkin |
| npm | hpsetup:4.1.20 | , 14 2026 mumkin |
| npm | hpsetup:4.2.0 | , 14 2026 mumkin |
| npm | housecallpro:1.0.1 | , 14 2026 mumkin |
| pypi | ai-imlo tekshiruvchilari: 1.0.0 | , 14 2026 mumkin |
| pypi | sikada-tg:0.3.6 | , 14 2026 mumkin |
| npm | smtp-test-server-tugun: 99.2.1 | , 14 2026 mumkin |
| npm | smtp-test-server-tugun: 99.2.2 | , 14 2026 mumkin |
| npm | @lir-portal/veb-komponentlar: 2.0.4 | , 14 2026 mumkin |
| npm | dotenvv-vositasi: 1.0.1 | , 14 2026 mumkin |
| npm | rimraf-utils:1.0.1 | , 14 2026 mumkin |
| npm | express-vositasi: 1.0.0 | , 14 2026 mumkin |
| npm | express-vositasi: 1.0.1 | , 14 2026 mumkin |
| npm | express-utils:1.0.1 | , 14 2026 mumkin |
| npm | @dizayn-tizim-koopeuch/veb:999.0.4 | , 14 2026 mumkin |
| npm | @dizayn-tizim-koopeuch/veb:999.0.3 | , 14 2026 mumkin |
| npm | @dizayn-tizim-koopeuch/veb:999.0.2 | , 14 2026 mumkin |
| pypi | pyexecutorsme:0.1.0 | , 15 2026 mumkin |
| pypi | pyexecutorsme:0.1.2 | , 15 2026 mumkin |
| npm | salom-dunyo-pkg-qiymati-qiymati-p:1.0.7 | , 15 2026 mumkin |
| npm | salom-dunyo-pkg-qiymati-qiymati-p:1.0.10 | , 15 2026 mumkin |
| npm | akson-enterprise: 1.0.0 | , 15 2026 mumkin |
1-hafta: 158 dan ortiq posilka topildi
| Ekosistema | To'plam | sana |
|---|---|---|
| npm | @apple-pay-trust/bekor qilindi: 99.0.3 | , 01 2026 mumkin |
| npm | apple-ichki-xavfsizlik-kutubxonasi-v99:100.0.1 | , 01 2026 mumkin |
| npm | fiat-token-admin:99.1.1 | , 01 2026 mumkin |
| npm | yulduzcha-stablecoin-skriptlari: 99.1.0 | , 01 2026 mumkin |
| npm | tugun-qizil-hissa-tulki-nazorat-admin: 2.0.3 | , 01 2026 mumkin |
| npm | tugun-qizil-hissa-tulki-nazorat-admin: 2.0.4 | , 01 2026 mumkin |
| npm | tugun-qizil-hissa-tulki-nazorat-admin: 2.0.7 | , 01 2026 mumkin |
| npm | qora soqol-navigator: 211.0.0 | , 01 2026 mumkin |
| npm | qora soqol-navigator: 212.0.0 | , 01 2026 mumkin |
| npm | qora soqol-navigator: 213.0.0 | , 01 2026 mumkin |
| npm | qora soqol-navigator: 217.0.0 | , 01 2026 mumkin |
| npm | qora soqol-navigator: 220.0.0 | , 01 2026 mumkin |
| npm | qora soqol-navigator: 221.0.0 | , 01 2026 mumkin |
| npm | qora soqol-navigator: 222.0.0 | , 01 2026 mumkin |
| npm | sirenalar-nolasi:211.0.0 | , 01 2026 mumkin |
| npm | sirenalar-nolasi:212.0.0 | , 01 2026 mumkin |
| npm | sirenalar-nolasi:213.0.0 | , 01 2026 mumkin |
| npm | porox-arvoh: 212.0.0 | , 01 2026 mumkin |
| npm | porox-arvoh: 219.0.0 | , 01 2026 mumkin |
| npm | kodshunos-oqim: 1.0.15 | , 02 2026 mumkin |
| npm | shadxino:1.0.5 | , 02 2026 mumkin |
| npm | amazon-data-kiosk-monorepo:1.0.10 | , 02 2026 mumkin |
| npm | claude-code-eng yaxshi: 2.0.1 | , 03 2026 mumkin |
| npm | apexpro:99.99.99 | , 03 2026 mumkin |
| npm | apexomni:99.99.99 | , 03 2026 mumkin |
| npm | apexomni:99.99.100 | , 03 2026 mumkin |
| npm | apexpro:99.99.100 | , 03 2026 mumkin |
| npm | tugun-muhit-hal qilish: 1.0.7 | , 03 2026 mumkin |
| npm | tugun-muhit-hal qilish: 1.0.8 | , 03 2026 mumkin |
| npm | @xp-kommunal xizmatlar/veb:99.0.0 | , 03 2026 mumkin |
| npm | nextjs-ai-xizmati bilan-chat:99.9.9 | , 03 2026 mumkin |
| npm | @alfa.life.mapp/app.web:99.0.13 | , 04 2026 mumkin |
| npm | @alfa.life.mapp/app.web:99.0.14 | , 04 2026 mumkin |
| npm | @alfa.life.mapp/app.web:99.0.15 | , 04 2026 mumkin |
| npm | @alfa.life.mapp/app.web:99.0.16 | , 04 2026 mumkin |
| npm | @alfa.life.mapp/app.web:99.0.17 | , 04 2026 mumkin |
| npm | @alfa.life.mapp/app.web:99.0.19 | , 04 2026 mumkin |
| npm | @sbt_gitverse/analytics-mijoz: 99.0.1 | , 04 2026 mumkin |
| npm | @sbt_gitverse/analytics-mijoz: 99.0.4 | , 04 2026 mumkin |
| npm | @sbt_gitverse/analytics-mijoz: 99.0.5 | , 04 2026 mumkin |
| npm | @tochka-ui/foundation:99.0.2 | , 04 2026 mumkin |
| npm | @tochka-ui/foundation:99.0.3 | , 04 2026 mumkin |
| npm | @tochka-ui/foundation:99.0.4 | , 04 2026 mumkin |
| npm | kl-b2c-ui-kit:99.0.1 | , 04 2026 mumkin |
| npm | kl-b2c-ui-kit:99.0.2 | , 04 2026 mumkin |
| npm | kl-b2c-ui-kit:99.0.3 | , 04 2026 mumkin |
| npm | pi-exa-mcp:99.9.11 | , 04 2026 mumkin |
| npm | pi-exa-mcp:99.9.12 | , 04 2026 mumkin |
| npm | google-cloud-secret-manager-config-poc:99.9.26 | , 04 2026 mumkin |
| npm | google-cloud-secret-manager-config-poc:99.9.33 | , 04 2026 mumkin |
| npm | google-cloud-secret-manager-config-poc:99.9.34 | , 04 2026 mumkin |
| npm | google-cloud-secret-manager-config-poc:99.9.35 | , 04 2026 mumkin |
| npm | google-cloud-secret-manager-config-poc:99.9.37 | , 04 2026 mumkin |
| npm | google-cloud-secret-manager-config-poc:99.9.38 | , 04 2026 mumkin |
| npm | google-cloud-secret-manager-config-poc:99.9.51 | , 04 2026 mumkin |
| npm | google-cloud-secret-manager-config-poc:99.9.53 | , 04 2026 mumkin |
| npm | paypal-to'lovlar-ko'prigi: 99.9.9 | , 04 2026 mumkin |
| npm | paypal-to'lovlar-ko'prigi: 100.1.1 | , 04 2026 mumkin |
| npm | paypal-to'lovlar-ko'prigi: 100.1.4 | , 04 2026 mumkin |
| npm | paypal-to'lovlar-ko'prigi: 100.1.6 | , 04 2026 mumkin |
| npm | paypal-to'lovlar-ko'prigi: 100.1.9 | , 04 2026 mumkin |
| npm | paypal-to'lovlar-ko'prigi: 100.2.8 | , 04 2026 mumkin |
| npm | Microsoft-xodimlar tajribasi: 99.2.2 | , 05 2026 mumkin |
| npm | sazan qalqoni: 0.1.0 | , 05 2026 mumkin |
| npm | fanduel:100.5.0 | , 05 2026 mumkin |
| npm | exiouss:1.0.6 | , 05 2026 mumkin |
| npm | enterprise-auth-gateway-yadrosi: 50.50.50 | , 06 2026 mumkin |
| npm | @saif777/codemirror5:7.66.4 | , 06 2026 mumkin |
| npm | @saif777/codemirror5:7.66.5 | , 06 2026 mumkin |
| npm | xususiyat-bayroq-xizmati: 2.0.1 | , 06 2026 mumkin |
| npm | xususiyat-bayroq-xizmati: 2.0.2 | , 06 2026 mumkin |
| npm | xususiyat-bayroq-xizmati: 2.0.3 | , 06 2026 mumkin |
| npm | sort-btree:2.1.2 | , 06 2026 mumkin |
| npm | viem-yadrosi: 1.0.0 | , 06 2026 mumkin |
| npm | viem-utils-core:1.0.0 | , 06 2026 mumkin |
| npm | hardhat-core-utils:1.0.0 | , 06 2026 mumkin |
| npm | veltriks:1.0.0 | , 06 2026 mumkin |
| npm | evm-utils:1.0.0 | , 06 2026 mumkin |
| npm | web3-utils-yadrosi:1.0.0 | , 06 2026 mumkin |
| npm | quyish-utils: 1.0.0 | , 06 2026 mumkin |
| npm | karbonite ilovasi: 99.9.0 | , 07 2026 mumkin |
| npm | karbonit-ichki: 99.9.0 | , 07 2026 mumkin |
| npm | pul-bo'rsiq-ochiq-rpc:200.99.100 | , 07 2026 mumkin |
| npm | 24712-pl5006:0.0.1 | , 07 2026 mumkin |
| openvsx | eriklynd/json-vositalari: 20.1.2 | , 07 2026 mumkin |
| npm | invixco:1.0.4 | , 07 2026 mumkin |
| npm | win-sys-health-agent:1.0.2 | , 08 2026 mumkin |
| npm | win-env-sozlash: 3.0.6 | , 08 2026 mumkin |
| npm | win-sys-health-agent:1.0.3 | , 08 2026 mumkin |
Dasturiy ta'minot ta'minot zanjiringizni zaifliklar va zararli kodlardan himoya qiling
Dasturiy ta'minot zanjiri hujumlari endi nazariy tahdidlar emas. Zararli paketlar, AI dan xabardor zararli dasturlar, qaramlik chalkashliklariga qarshi hujumlar, ma'lumotnoma o'g'irlovchilari va zaharlangan dasturchilar vositalari zamonaviy texnologiyalarni faol ravishda nishonga olmoqda. SDLCs, CI/CD pipelines va AI yordamida ishlab chiqish muhitlari.
Xygeni'ning zararli dasturlarni erta aniqlashi bilan va software supply chain security platformada tashkilotlar zararli bog'liqliklar ishlab chiquvchi ish stantsiyalariga, tizimlarni yaratishga yoki ishlab chiqarishga yetib borishdan oldin ularni aniqlashi va bloklashi mumkin pipelines.
Xygeni zararli paketlarni, shubhali nashr qilish naqshlarini, xatolarni yozishni, nom maydonini suiiste'mol qilishni, hisob ma'lumotlarini o'g'irlash xatti-harakatlarini va AI tomonidan boshqariladigan ta'minot zanjiri tahdidlarini real vaqt rejimida aniqlash uchun npm, PyPI, VS Code va OpenVSX kabi ekotizimlarni doimiy ravishda kuzatib boradi. Topilmalar avtomatik ravishda ekspluatatsiya, kirish imkoniyati va operatsion ta'sirga qarab ustuvorliklarga ega bo'ladi, shunda jamoalar aslida muhim bo'lgan xavflarga e'tibor qaratishlari mumkin.
Zararli npm paketlari va buzilgan OSS bog'liqliklaridan tortib, AI tomonidan yaratilgan kod xavflari va zaharlangan ishlab chiquvchilar vositalarigacha, Xygeni xavfsizlik va muhandislik guruhlariga zamonaviy dasturiy ta'minot ta'minoti zanjiri bo'ylab ko'rinishni, ishonchni va nazoratni saqlashga yordam beradi.
Xygeni xavfsizlik guruhi tomonidan aniqlangan eng so'nggi zararli dasturiy ta'minot kampaniyalari va tasdiqlangan zararli paketlarni o'rganish uchun to'liq sahifaga tashrif buyuring. Zararli kod dayjesti.
Xavfsiz bo'ling. Tez bo'ling. Xygeni bilan nazoratni saqlang.
