Siyakwamukela kuhlelo lukaMeyi lwe-Xygeni Malicious Code Digest. Kule nyanga, ithimba lethu locwaningo lwezokuphepha liqhubekile nokulandelela isimo esishintshashintshayo sezinsongo zochungechunge lwesofthiwe kuzo zonke izikhungo zokubhalisa amaphakheji zomphakathi, amathuluzi onjiniyela, imisebenzi yokusiza nge-AI, kanye nesimanje. CI/CD izindawo. Kuyo yonke iMeyi, i-Xygeni ithole futhi yaqinisekisa amakhulu amaphakheji anonya ahlose i-npm, i-PyPI, i-VS Code, kanye ne-OpenVSX ecosystems.
Kodwa uMeyi wayengagcini nje ngokuba nomthamo. Kwakuyinyanga lapho abahlaseli bashintsha khona ubuciko babo ukuze buvumelane nezimo zokuthuthukiswa kwe-AI, izinkolelo zokwethenjwa kwabathuthukisi, kanye nokuzenzakalelayo. pipelines.
Phakathi kophenyo oluphawuleka kakhulu olushicilelwe yi-Xygeni Security Team kule nyanga:
- UJulesJacker, umkhankaso we-malware we-npm onezigaba eziningi ozenza i-ejenti ye-AI kaJules ye-Google ukuze yebe izindawo zokugcina, ukuxhaphaza CI/CD izindawo, futhi ngisho nokubhekisa i-sandbox ehlaziya lokho. Umkhankaso wethule ama-loaders avikelwe nge-encrypted host-gated, aqanjiwe
google-labs-jules[bot]commits, ukwebiwa kwe-metadata yamafu, kanye nokuhlola kabusha i-Kubernetes ngokumelene nengqalasizinda yokuhlaziya uqobo. - PhantomBot, umkhankaso we-npm ononya osebenzisa kabi isikhwama semali esingumgunyathi, i-blockchain, kanye namathuluzi e-Web3 ukuze kwebiwe iziqinisekiso, kubekwe engcupheni izindawo zonjiniyela, futhi kuqondiswe emisebenzini ehlobene ne-crypto ngokusebenzisa kabi ukuncika kanye nokulethwa kwemithwalo yemisebenzi ngezigaba.
- Uhlelo olukhulu lwe-npm olunonya olusebenzisa kabi izinsiza ze-TypeScript ezingamanga, amaphakheji anetimu ye-AI, ukuzenza ongeyena kwamathuluzi angaphakathi, imitapo yolwazi engaphambili, abasizi bamafu, kanye nezinhlaka zabakhi ezindaweni zeminwe, ukukhipha iziqinisekiso, ukufaka ukuphikelela, kanye nokubeka engcupheni izinhlelo zonjiniyela.
- Amagagasi aqhubekayo amaphakheji anonya asebenzisa ukudideka kokuthembela, ukubhala phansi, ukusetshenziswa kabi kwangemva kokufaka, ukuzenza ongeyena ithuluzi le-AI, ukukhuphuka kwenani lenguqulo, kanye nokusetshenziswa kabi kwesikhala samagama okuphindaphindiwe okwenzelwe ukugwema ukwethenjwa konjiniyela kanye nokubeka engcupheni isimanje. SDLC imisebenzi ngaphambi kokutholwa.
- Ukutholakala kwemikhankaso ye-malware esebenzisa amapulatifomu ahlukahlukene njenge-
@jaggle/resizeobservesi-clipboard hijacker, eyazenza iphakheji esemthethweni ngenkathi isebenzisa ukuqhubeka okusekelwe ku-Python kanye nokufakwa esikhundleni kwebhodi lokunamathisela le-crypto-wallet kuzo zonke izinhlelo ze-Linux, macOS, kanye ne-Windows.
Kuyo yonke inyanga, siphinde sabona ukuhlangana okukhulayo phakathi kokusetshenziswa kwamathuluzi e-AI, izimiso zemvelo ezivulekile, kanye nokuhlaselwa kwe-software supply chain. Abenzi bezinsongo bagxile kakhulu emisebenzini yokuthuthukiswa esizwa yi-AI, izindawo zama-ejenti, abashayeli bezindiza abangontanga, kanye nokwakhiwa okudalwe ngamafu. pipelinenjengengxenye yemisebenzi ebanzi yokwebiwa kweziqinisekiso kanye nokunciphisa izikweletu.
Lokhu kuhlasela akusezona izimo ezingavamile zokubhala phansi amagama. Kuhilela imikhankaso yokushicilela ehlelekile, ukuqhuma kwenguqulo ezenzakalelayo, ukwebiwa kwamathokheni efu, CI/CD ukuxhashazwa, ukubekwa kwemithwalo ebethelwe, ukugwema i-sandbox, kanye namasu okuyekethisa okuqhubekayo aklanyelwe ngqo ukuhlangana nezinhlelo zemvelo zonjiniyela ezithembekile.
Lokhu kubuyekezwa kwanyanga zonke kuyingxenye yesinyathelo esiqhubekayo se-Xygeni sokucwaninga nge-malware kanye nosongo lwe-supply chain, lapho ithimba lethu liqinisekisa khona njalo amaphakheji anonya, liphenya amaphethini okuhlasela avelayo, futhi lishicilele ubuhlakani obusebenzayo ukusiza ezokuphepha, amaqembu e-AppSec, kanye ne-DevSecOps ukuthi ahlale phambili engcupheni yoshintsho lwe-supply chain.
Ukuze uthole umongo ogcwele kuwo wonke amaphakheji anonya, umkhankaso we-malware, kanye nokuhlaziywa kwezinsongo okushicilelwe kule nyanga, hlola i-May Malicious Code Digest ephelele kanye nocwaningo oluhlobene oluvela ku-Xygeni Security Team.
Isonto 4: Kutholakale Amaphakheji Angaphezu Kwe-104
| Ecosystem | Iphakheji | Usuku |
|---|---|---|
| npm | @gbrlxvii/ts-form-utils:4.6.0 | Kwangathi 25, 2026 |
| npm | @gbrlxvii/ts-form-utils:4.7.0 | Kwangathi 25, 2026 |
| npm | i-pi-ocr:0.2.0 | Kwangathi 25, 2026 |
| npm | @jaggle/resizeobserves:1.0.11 | Kwangathi 25, 2026 |
| npm | izitolo ze-fnd: 0.0.7 | Kwangathi 25, 2026 |
| npm | @gbrlxvii/ts-project-lint:1.7.0 | Kwangathi 25, 2026 |
| npm | @gbrlxvii/ts-project-lint:1.8.0 | Kwangathi 25, 2026 |
| npm | isihlonzi-somsebenzisi-wesistimu-cli:7.0.0 | Kwangathi 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.13 | Kwangathi 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.12 | Kwangathi 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.15 | Kwangathi 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.14 | Kwangathi 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.16 | Kwangathi 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.19 | Kwangathi 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.17 | Kwangathi 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.18 | Kwangathi 26, 2026 |
| npm | @jaggle/resizeobserves:1.0.20 | Kwangathi 26, 2026 |
| npm | izikhangiso zangaphakathi: 99.0.1 | Kwangathi 26, 2026 |
| npm | ukwakheka kwesikhashana: 99.0.0 | Kwangathi 26, 2026 |
| npm | ukwakheka kwesikhashana: 99.0.2 | Kwangathi 26, 2026 |
| npm | abadlali be-itc-api:99.0.0 | Kwangathi 26, 2026 |
| npm | amamojula abiwe nge-walmart: 99.0.1 | Kwangathi 26, 2026 |
| npm | izingxenye ze-wml: 99.0.1 | Kwangathi 26, 2026 |
| npm | i-tempo yesikhulumi: 99.0.1 | Kwangathi 26, 2026 |
| npm | i-wml-core:99.0.1 | Kwangathi 26, 2026 |
| npm | @izumiswap/sdk:3.0.3 | Kwangathi 26, 2026 |
| npm | @izumiswap/sdk:3.0.4 | Kwangathi 26, 2026 |
| npm | @izumiswap/sdk:3.0.5 | Kwangathi 26, 2026 |
| npm | i-schema ye-json-kuya-elula-ye-graphql:1.0.0 | Kwangathi 26, 2026 |
| npm | uhlelo lokusebenza lwe-cdk olusabelayo:1.0.1 | Kwangathi 27, 2026 |
| npm | mmt-static:1.0.0 | Kwangathi 27, 2026 |
| npm | uhlelo lokusebenza lwe-cdk olusabelayo:1.0.4 | Kwangathi 27, 2026 |
| npm | i-cdk-sagemaker-hhayiebook-ukuhamba komsebenzi: 1.0.3 | Kwangathi 27, 2026 |
| npm | ukwakheka kokutholakala:1.0.0 | Kwangathi 27, 2026 |
| pypi | umhlaba wekanga:1.0.4 | Kwangathi 27, 2026 |
| npm | i-forge-jsxy:1.0.92 | Kwangathi 27, 2026 |
| npm | @gs-select/savings-client-application:99.0.0 | Kwangathi 27, 2026 |
| npm | i-forge-jsxy:1.0.105 | Kwangathi 27, 2026 |
| npm | i-forge-jsxy:1.0.107 | Kwangathi 27, 2026 |
| npm | i-forge-jsxy:1.0.108 | Kwangathi 27, 2026 |
| npm | ukuqinisekiswa kwe-mse-yokuhlela: 99.0.1 | Kwangathi 28, 2026 |
| npm | ikhodi yokuhlela: 99.0.1 | Kwangathi 28, 2026 |
| npm | izingxenye ze-mse-tool: 99.99.100 | Kwangathi 28, 2026 |
| npm | i-forge-jsxy:1.0.120 | Kwangathi 28, 2026 |
| npm | @gbrlxvi/ts-form-utils:1.0.0 | Kwangathi 29, 2026 |
| vscode | umsizi-wonjiniyela we-rudranex:1.0.1 | Kwangathi 29, 2026 |
| npm | intatheli ye-nemo:1.8.2 | Kwangathi 29, 2026 |
| npm | @qlab/ui:2.0.5 | Kwangathi 29, 2026 |
| npm | i-forge-jsxy:1.0.121 | Kwangathi 29, 2026 |
| npm | @qlab/ui:2.0.6 | Kwangathi 29, 2026 |
| npm | @qlab/component-intelligence:2.0.6 | Kwangathi 29, 2026 |
| npm | ukusethwa kwenjini yokusesha:1.0.9106 | Kwangathi 29, 2026 |
| npm | ithuluzi lokusetha i-opensearch:1.0.9107 | Kwangathi 29, 2026 |
| npm | @0xlr/vercel-analytics:999.0.0 | Kwangathi 29, 2026 |
| npm | @0xlr/umugqa ongaphambili:999.0.0 | Kwangathi 29, 2026 |
| npm | @0xlr/stripe-checkout-js:999.0.0 | Kwangathi 29, 2026 |
| npm | @0xlr/sentry-web:999.0.0 | Kwangathi 29, 2026 |
| npm | @0xlr/clerk-auth:999.0.0 | Kwangathi 29, 2026 |
| npm | @0xlr/supabase-db:999.0.0 | Kwangathi 29, 2026 |
| npm | @0xlr/prisma-client-js:999.0.0 | Kwangathi 29, 2026 |
| npm | @flexspec/cli:0.3.1-dev.26612027722 | Kwangathi 29, 2026 |
| npm | @cloudplatform-single-spa/ukuphathwa:99.99.100 | Kwangathi 30, 2026 |
| npm | @cloudplatform-single-spa/svp-s3-storage:99.99.100 | Kwangathi 30, 2026 |
| npm | @maximvs1538/os-npm:99.0.0 | Kwangathi 30, 2026 |
| npm | @ukungena okulula/imizila yokufika:99.9.5 | Kwangathi 30, 2026 |
| npm | @ukungena okulula/ukubhalisa-ngaphandle-kwe-fop-navigator:99.9.5 | Kwangathi 30, 2026 |
| npm | @ukungena okulula/imizila:99.9.5 | Kwangathi 30, 2026 |
| npm | cms-github:4.2.4 | Kwangathi 30, 2026 |
| npm | @t-in-one/form_product_token:5.7.1 | Kwangathi 30, 2026 |
| npm | @capibar.chat/ui-kit:99.5.7 | Kwangathi 30, 2026 |
| npm | usizo lwe-cms:4.2.6 | Kwangathi 30, 2026 |
| npm | usizo lwe-cms:4.2.8 | Kwangathi 30, 2026 |
| vscode | umphathi we-xampp: 5.1.3 | Kwangathi 30, 2026 |
| npm | @ithempulethi-yengxoxo/ugunyazo:1.0.0 | Kwangathi 31, 2026 |
| npm | isikhungo sesitolo se-cms:1.3.4 | Kwangathi 31, 2026 |
| npm | isikhungo sesitolo se-cms:1.3.5 | Kwangathi 31, 2026 |
| npm | isu-lendawo-yokuthengisa-ingaphambili: 1.1.1 | Kwangathi 31, 2026 |
| npm | isu-lendawo-yokuthengisa-ingaphambili: 1.1.2 | Kwangathi 31, 2026 |
| npm | isikhungo sesitolo se-cms:1.3.6 | Kwangathi 31, 2026 |
| pypi | i-simtooreal-cli:0.3.0 | Jun 01, 2026 |
| npm | i-conversa-sdk:2.0.2 | Jun 01, 2026 |
| npm | i-veltrix:9.0.0 | Jun 01, 2026 |
| npm | i-jingmeideshishi:1.0.4 | Jun 01, 2026 |
| npm | @tse-digital/core:99.0.0 | Jun 01, 2026 |
| npm | @telenor-se/core:99.0.0 | Jun 01, 2026 |
| npm | @ownit/core:99.0.0 | Jun 01, 2026 |
| npm | i-jingmeideshishi:1.0.5 | Jun 01, 2026 |
| npm | imibhalo yesiguli: 75.0.0 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.69 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.68 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.82 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.80 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.81 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.83 | Jun 01, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.3 | Jun 01, 2026 |
| npm | i-veltrix:9.0.1 | Jun 01, 2026 |
| npm | @emcd-vue/auth:6.4.9 | Jun 01, 2026 |
| npm | @emcd-vue/b2b-pay-form:5.7.4 | Jun 01, 2026 |
Isonto 3: Kutholakale Amaphakheji Angaphezu Kwe-106
| Ecosystem | Iphakheji | Usuku |
|---|---|---|
| npm | uthando lwe-erslove:1.22.12 | Kwangathi 16, 2026 |
| npm | dit-envv:17.4.2 | Kwangathi 16, 2026 |
| npm | uBriantree http:0.4.0 | Kwangathi 16, 2026 |
| npm | i-bot yokuvumelanisa-inkohliso:1.0.0 | Kwangathi 16, 2026 |
| i-openvsx | bingcha/bcai-amathuluzi:4.0.35 | Kwangathi 16, 2026 |
| npm | sawubona-umhlaba-we-pkg-inani-lenani-p:1.0.11 | Kwangathi 16, 2026 |
| npm | sawubona-umhlaba-we-pkg-inani-lenani-p:1.0.8 | Kwangathi 16, 2026 |
| npm | sawubona-umhlaba-we-pkg-inani-lenani-p:1.0.9 | Kwangathi 16, 2026 |
| npm | sawubona-umhlaba-we-pkg-inani-lenani-p:1.0.12 | Kwangathi 16, 2026 |
| npm | i-axois-utils:1.0.6 | Kwangathi 16, 2026 |
| npm | i-axois-utils:1.0.4 | Kwangathi 16, 2026 |
| npm | umlobi wemidlalo we-venturo-core:1.0.8 | Kwangathi 16, 2026 |
| npm | i-chalk-temalte:1.0.16 | Kwangathi 16, 2026 |
| npm | i-chalk-temalte:1.0.14 | Kwangathi 16, 2026 |
| npm | i-chalk-temalte:1.0.20 | Kwangathi 17, 2026 |
| npm | i-chalk-temalte:1.0.19 | Kwangathi 17, 2026 |
| npm | i-axois-utils:1.0.9 | Kwangathi 17, 2026 |
| npm | @rocketreach/rr-components:9999.0.0 | Kwangathi 17, 2026 |
| npm | @cplace-paw-fe/cf-training-extended:2.0.4 | Kwangathi 18, 2026 |
| npm | i-node yeseva yokuhlola ye-smtp:99.2.1 | Kwangathi 18, 2026 |
| npm | i-node yeseva yokuhlola ye-smtp:99.2.2 | Kwangathi 18, 2026 |
| npm | @lir-portal/izingxenye zewebhu:2.0.4 | Kwangathi 18, 2026 |
| npm | @zentrafinance/izinkontileka:1.0.3 | Kwangathi 18, 2026 |
| npm | @zentrafinance/protocol-config:1.0.3 | Kwangathi 18, 2026 |
| npm | @zentrafinance/sdk:1.0.3 | Kwangathi 18, 2026 |
| npm | @zentrafinance/izinhlobo:1.0.3 | Kwangathi 18, 2026 |
| npm | @zentrafinance/izinhlobo:1.0.5 | Kwangathi 18, 2026 |
| npm | @zentrafinance/protocol-config:1.0.6 | Kwangathi 18, 2026 |
| npm | @zentrafinance/sdk:1.0.6 | Kwangathi 18, 2026 |
| npm | @zentrafinance/izinhlobo:1.0.7 | Kwangathi 18, 2026 |
| npm | i-clementine-sdk:2.0.0 | Kwangathi 18, 2026 |
| npm | ama-citrea-utils:2.0.0 | Kwangathi 18, 2026 |
| npm | @zentrafinance/protocol-config:2.0.1 | Kwangathi 18, 2026 |
| npm | @zentrafinance/sdk:2.0.0 | Kwangathi 18, 2026 |
| npm | @zentrafinance/izinhlobo:2.0.1 | Kwangathi 18, 2026 |
| npm | @zentrafinance/izinhlobo:2.0.0 | Kwangathi 18, 2026 |
| npm | i-bui-reaction-10hooks: 99.0.0 | Kwangathi 18, 2026 |
| npm | izingxenye ze-bui-reaction-10:99.0.0 | Kwangathi 18, 2026 |
| npm | @deadcode09284814/axios-util:1.0.1 | Kwangathi 18, 2026 |
| npm | @deadcode09284814/axios-util:1.0.0 | Kwangathi 18, 2026 |
| npm | izinto zokusebenzisa isitayela sombala: 1.0.7 | Kwangathi 18, 2026 |
| npm | isixazululo se-node-env:1.2.0 | Kwangathi 18, 2026 |
| npm | @easytipsportal/node-helper:1.0.1 | Kwangathi 18, 2026 |
| npm | @zentrafinance/izinkontileka:2.0.2 | Kwangathi 18, 2026 |
| npm | i-citrea-sdk:2.0.2 | Kwangathi 18, 2026 |
| npm | i-clementine-sdk:2.0.2 | Kwangathi 18, 2026 |
| npm | ibhuloho le-citrea:2.0.2 | Kwangathi 18, 2026 |
| npm | ama-citrea-utils:2.0.2 | Kwangathi 18, 2026 |
| npm | @zentrafinance/izinhlobo:2.0.2 | Kwangathi 18, 2026 |
| npm | i-apexomni-node:1.0.0 | Kwangathi 19, 2026 |
| npm | ukuhweba okuphezulu: 1.0.0 | Kwangathi 19, 2026 |
| npm | ukuhweba okuphezulu: 1.0.1 | Kwangathi 19, 2026 |
| npm | isixhumi se-apex: 1.0.4 | Kwangathi 19, 2026 |
| npm | i-apexpro-node:1.0.2 | Kwangathi 19, 2026 |
| npm | isixhumi se-apex: 1.0.3 | Kwangathi 19, 2026 |
| npm | i-apexomni-node:1.0.2 | Kwangathi 19, 2026 |
| npm | ukuhweba okuphezulu: 1.0.2 | Kwangathi 19, 2026 |
| npm | i-apexpro-node:1.0.3 | Kwangathi 19, 2026 |
| npm | i-forge-jsxy:1.0.81 | Kwangathi 19, 2026 |
| npm | i-forge-jsxy:1.0.90 | Kwangathi 19, 2026 |
| npm | isigqoko sesikele: 0.2.1 | Kwangathi 20, 2026 |
| npm | @doctolib-apps/native-personalized-services:99.99.99 | Kwangathi 21, 2026 |
| npm | @doctolib-apps/native-personalized-services:1.0.0 | Kwangathi 21, 2026 |
| npm | @doctolib-apps/native-personalized-services:1.0.1 | Kwangathi 21, 2026 |
| pypi | i-kanga-hack:1.0.4 | Kwangathi 21, 2026 |
| pypi | i-libhmac:0.8.28.1 | Kwangathi 21, 2026 |
| npm | @limebike/igridi-yedatha-ephakeme:85.14.44 | Kwangathi 21, 2026 |
| npm | @limebike/abakhethi bedethi ephezulu:85.14.44 | Kwangathi 21, 2026 |
| npm | @limebike/igridi-yedatha-ephakeme:85.14.48 | Kwangathi 21, 2026 |
| pypi | i-ai-prishtina-agent-kag:0.1.0 | Kwangathi 21, 2026 |
| npm | hehehe:1.0.7 | Kwangathi 21, 2026 |
| npm | isithwebuli-sosongo esiqondile: 2.1.2 | Kwangathi 22, 2026 |
| npm | umhloli-wokhiye wokuthunyelwa: 0.7.3 | Kwangathi 22, 2026 |
| npm | i-eth-wallet-sentinel:1.0.9 | Kwangathi 22, 2026 |
| npm | isitholi-secrets-web3:1.2.6 | Kwangathi 22, 2026 |
| npm | ukuvikela-ukusebenzisa ukuqina: 0.4.4 | Kwangathi 22, 2026 |
| npm | ukuhlolwa kokuphepha kwe-mnemonic:0.5.2 | Kwangathi 22, 2026 |
| npm | isithwebuli-semininingwane se-crypto:2.0.2 | Kwangathi 22, 2026 |
| npm | isiqinisekisi-se-key:0.2.3 | Kwangathi 22, 2026 |
| npm | isiqinisekisi-se-key:0.2.4 | Kwangathi 22, 2026 |
| npm | umhloli we-defi-env:0.3.3 | Kwangathi 22, 2026 |
| npm | umhloli-wokhiye wokuthunyelwa: 1.8.2 | Kwangathi 22, 2026 |
| npm | umhloli we-defi-env:1.4.2 | Kwangathi 22, 2026 |
| npm | ukuvikela-ukusebenzisa ukuqina: 1.5.2 | Kwangathi 22, 2026 |
| npm | isihloli-sokuphepha kwesikhwama: 2.1.3 | Kwangathi 22, 2026 |
| npm | ukuvikela-ukusebenzisa ukuqina: 1.5.3 | Kwangathi 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.1 | Kwangathi 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.3 | Kwangathi 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.2 | Kwangathi 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.5 | Kwangathi 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.6 | Kwangathi 22, 2026 |
| npm | isithwebuli-sosongo esiqondile: 3.2.5 | Kwangathi 22, 2026 |
| npm | isithwebuli-sosongo esiqondile: 3.2.4 | Kwangathi 22, 2026 |
| npm | umhloli we-defi-env:1.4.9 | Kwangathi 22, 2026 |
| npm | isitholi-secrets-web3:2.3.6 | Kwangathi 22, 2026 |
| npm | isihloli-sokuphepha kwesikhwama: 2.1.6 | Kwangathi 22, 2026 |
| npm | ukuhlolwa kokuphepha kwe-mnemonic:4.0.0 | Kwangathi 22, 2026 |
| npm | i-eth-wallet-sentinel:4.0.0 | Kwangathi 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.7 | Kwangathi 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.8 | Kwangathi 22, 2026 |
| npm | @jaggle/resizeobserves:1.0.4 | Kwangathi 22, 2026 |
Isonto 2: Kutholakale Amaphakheji Angaphezu Kwe-95
| Ecosystem | Iphakheji | Usuku |
|---|---|---|
| npm | ukusethwa kwe-win-env: 3.0.5 | Kwangathi 11, 2026 |
| npm | isithonjana se-reaction-svgs:1.0.1 | Kwangathi 11, 2026 |
| npm | ibheji-lemali-evulekile-rpc:201.99.100 | Kwangathi 11, 2026 |
| npm | izinsiza ze-env ezingenaseva: 1.0.0 | Kwangathi 11, 2026 |
| npm | izinsiza ze-env ezingenaseva: 1.0.2 | Kwangathi 11, 2026 |
| npm | izinsiza ze-env ezingenaseva: 1.0.3 | Kwangathi 11, 2026 |
| npm | sahrbrucecode32:1.0.0 | Kwangathi 11, 2026 |
| npm | isithunywa_se-claw:0.0.71 | Kwangathi 11, 2026 |
| npm | @gbrlxvii/ts-form-utils:2.7.0 | Kwangathi 11, 2026 |
| npm | inqwaba yangemva kokuthenga: 99.9.19 | Kwangathi 11, 2026 |
| npm | inqwaba yangemva kokuthenga: 99.9.26 | Kwangathi 11, 2026 |
| npm | inqwaba yangemva kokuthenga: 100.0.1 | Kwangathi 11, 2026 |
| npm | inqwaba yangemva kokuthenga: 101.0.3 | Kwangathi 11, 2026 |
| npm | i-rsflows-pexml:99.9.15 | Kwangathi 11, 2026 |
| npm | i-rsflows-pexml:99.9.20 | Kwangathi 11, 2026 |
| npm | inqwaba yangemva kokuthenga: 102.0.3 | Kwangathi 11, 2026 |
| npm | i-rsflows-pexml:99.9.25 | Kwangathi 11, 2026 |
| npm | inqwaba yangemva kokuthenga: 1.99.0 | Kwangathi 11, 2026 |
| npm | ukusurfa kancane:10.0.0 | Kwangathi 11, 2026 |
| npm | uthando lwe-erslove:1.22.12 | Kwangathi 11, 2026 |
| npm | dit-envv:17.4.2 | Kwangathi 11, 2026 |
| npm | hehehe:1.0.4 | Kwangathi 11, 2026 |
| npm | @gbrlxvii/ts-form-utils:3.7.0 | Kwangathi 11, 2026 |
| npm | isithunywa_se-claw:0.0.74 | Kwangathi 11, 2026 |
| i-openvsx | yini/igatsha:1.2.7 | Kwangathi 11, 2026 |
| i-openvsx | george-alisson/html-preview-vscode:1.2.7 | Kwangathi 11, 2026 |
| i-openvsx | sohibe/java-generate-setters-getters:9.0.2 | Kwangathi 11, 2026 |
| npm | abathengisi: 99.0.6 | Kwangathi 11, 2026 |
| npm | uBriantree http:0.4.0 | Kwangathi 11, 2026 |
| npm | izinkontileka zasemini: 1.0.0 | Kwangathi 12, 2026 |
| npm | @draftlab/db:0.16.1 | Kwangathi 12, 2026 |
| npm | @uipath/uipath-python-bridge:1.0.1 | Kwangathi 12, 2026 |
| npm | @uipath/aops-policy-tool:0.3.1 | Kwangathi 12, 2026 |
| npm | @uipath/ithuluzi le-codedagent:1.0.1 | Kwangathi 12, 2026 |
| npm | @uipath/gov-tool:0.3.1 | Kwangathi 12, 2026 |
| npm | @uipath/telemetry:0.0.7 | Kwangathi 12, 2026 |
| npm | @uipath/ithuluzi lokuphatha:0.1.1 | Kwangathi 12, 2026 |
| npm | @uipath/codedapp-tool:1.0.1 | Kwangathi 12, 2026 |
| npm | @uipath/insights-sdk:1.0.1 | Kwangathi 12, 2026 |
| npm | @uipath/tool-workflowcompiler:0.0.12 | Kwangathi 12, 2026 |
| npm | @uipath/project-packager:1.1.16 | Kwangathi 12, 2026 |
| npm | @uipath/access-policy-sdk:0.3.1 | Kwangathi 12, 2026 |
| npm | @uipath/ithuluzi-lezixazululo eziqondile:1.0.1 | Kwangathi 12, 2026 |
| npm | @uipath/integrationservice-sdk:1.0.2 | Kwangathi 12, 2026 |
| npm | @uipath/ithuluzi-lenqubomgomo yokufinyelela:0.3.1 | Kwangathi 12, 2026 |
| npm | @uipath/resourcecatalog-tool:0.1.1 | Kwangathi 12, 2026 |
| npm | @uipath/ithuluzi le-ejenti:1.0.1 | Kwangathi 12, 2026 |
| npm | @uipath/api-workflow-tool:1.0.1 | Kwangathi 12, 2026 |
| npm | @uipath/ithuluzi-lemisebenzi:1.0.1 | Kwangathi 12, 2026 |
| npm | @uipath/ithuluzi-lesisombululo:1.0.1 | Kwangathi 12, 2026 |
| npm | @uipath/vss:0.1.6 | Kwangathi 12, 2026 |
| npm | @tallyui/izingxenye:1.0.1 | Kwangathi 12, 2026 |
| npm | @squawk/flight-math:0.5.4 | Kwangathi 12, 2026 |
| npm | @squawk/isimo sezulu:0.5.6 | Kwangathi 12, 2026 |
| npm | @mistralai/mistralai-gcp:1.7.1 | Kwangathi 12, 2026 |
| npm | @mesadev/saguaro:0.4.22 | Kwangathi 12, 2026 |
| npm | i-dpdgroupuk:0.0.1 | Kwangathi 12, 2026 |
| npm | @cplace-paw-fe/cf-training-extended:2.0.4 | Kwangathi 12, 2026 |
| npm | @jacobson1977/hp-setup:2.0.2 | Kwangathi 14, 2026 |
| npm | @jacobson1977/hp-setup:2.0.5 | Kwangathi 14, 2026 |
| npm | @jacobson1977/hp-setup:2.0.6 | Kwangathi 14, 2026 |
| npm | @jacobson1977/hp-setup:2.0.7 | Kwangathi 14, 2026 |
| npm | @jacobson1977/hp-setup:2.0.8 | Kwangathi 14, 2026 |
| npm | @jacobson1977/hp-setup:2.0.9 | Kwangathi 14, 2026 |
| npm | @jacobson1977/hp-setup:2.1.0 | Kwangathi 14, 2026 |
| npm | ukusetha kwe-hp:4.0.1 | Kwangathi 14, 2026 |
| npm | ukusetha kwe-hp:4.0.2 | Kwangathi 14, 2026 |
| npm | ukusetha kwe-hp:4.1.0 | Kwangathi 14, 2026 |
| npm | ukusetha kwe-hp:4.1.3 | Kwangathi 14, 2026 |
| npm | ukusetha kwe-hp:4.1.4 | Kwangathi 14, 2026 |
| npm | ukusetha kwe-hp:4.1.5 | Kwangathi 14, 2026 |
| npm | ukusetha kwe-hp:4.1.6 | Kwangathi 14, 2026 |
| npm | ukusetha kwe-hp:4.1.8 | Kwangathi 14, 2026 |
| npm | ukusetha kwe-hp:4.1.19 | Kwangathi 14, 2026 |
| npm | ukusetha kwe-hp:4.1.20 | Kwangathi 14, 2026 |
| npm | ukusetha kwe-hp:4.2.0 | Kwangathi 14, 2026 |
| npm | i-housecallpro:1.0.1 | Kwangathi 14, 2026 |
| pypi | abahloli bokupela be-ai:1.0.0 | Kwangathi 14, 2026 |
| pypi | i-cicada-tg:0.3.6 | Kwangathi 14, 2026 |
| npm | i-node yeseva yokuhlola ye-smtp:99.2.1 | Kwangathi 14, 2026 |
| npm | i-node yeseva yokuhlola ye-smtp:99.2.2 | Kwangathi 14, 2026 |
| npm | @lir-portal/izingxenye zewebhu:2.0.4 | Kwangathi 14, 2026 |
| npm | ithuluzi le-dotenvv:1.0.1 | Kwangathi 14, 2026 |
| npm | ama-rimraf-utils:1.0.1 | Kwangathi 14, 2026 |
| npm | ithuluzi le-express:1.0.0 | Kwangathi 14, 2026 |
| npm | ithuluzi le-express:1.0.1 | Kwangathi 14, 2026 |
| npm | Izinsiza ze-express:1.0.1 | Kwangathi 14, 2026 |
| npm | @design-system-coopeuch/web:999.0.4 | Kwangathi 14, 2026 |
| npm | @design-system-coopeuch/web:999.0.3 | Kwangathi 14, 2026 |
| npm | @design-system-coopeuch/web:999.0.2 | Kwangathi 14, 2026 |
| pypi | abaphathi be-pyexecutorsme:0.1.0 | Kwangathi 15, 2026 |
| pypi | abaphathi be-pyexecutorsme:0.1.2 | Kwangathi 15, 2026 |
| npm | sawubona-umhlaba-we-pkg-inani-lenani-p:1.0.7 | Kwangathi 15, 2026 |
| npm | sawubona-umhlaba-we-pkg-inani-lenani-p:1.0.10 | Kwangathi 15, 2026 |
| npm | i-axon-enterprise: 1.0.0 | Kwangathi 15, 2026 |
Isonto 1: Kutholakale Amaphakheji Angaphezu Kwe-158
| Ecosystem | Iphakheji | Usuku |
|---|---|---|
| npm | @apple-pay-trust/ikhanseliwe:99.0.3 | Kwangathi 01, 2026 |
| npm | ilabhulali-yokuphepha kwangaphakathi ye-apple-v99:100.0.1 | Kwangathi 01, 2026 |
| npm | ithokheni-yokuphatha i-fiat:99.1.1 | Kwangathi 01, 2026 |
| npm | izikripthi ze-stellar-stablecoin:99.1.0 | Kwangathi 01, 2026 |
| npm | i-node-red-contrib-fox-control-admin:2.0.3 | Kwangathi 01, 2026 |
| npm | i-node-red-contrib-fox-control-admin:2.0.4 | Kwangathi 01, 2026 |
| npm | i-node-red-contrib-fox-control-admin:2.0.7 | Kwangathi 01, 2026 |
| npm | i-navigator ye-blackbeards:211.0.0 | Kwangathi 01, 2026 |
| npm | i-navigator ye-blackbeards:212.0.0 | Kwangathi 01, 2026 |
| npm | i-navigator ye-blackbeards:213.0.0 | Kwangathi 01, 2026 |
| npm | i-navigator ye-blackbeards:217.0.0 | Kwangathi 01, 2026 |
| npm | i-navigator ye-blackbeards:220.0.0 | Kwangathi 01, 2026 |
| npm | i-navigator ye-blackbeards:221.0.0 | Kwangathi 01, 2026 |
| npm | i-navigator ye-blackbeards:222.0.0 | Kwangathi 01, 2026 |
| npm | isililo sama-sirens:211.0.0 | Kwangathi 01, 2026 |
| npm | isililo sama-sirens:212.0.0 | Kwangathi 01, 2026 |
| npm | isililo sama-sirens:213.0.0 | Kwangathi 01, 2026 |
| npm | isibhamu-isipoki:212.0.0 | Kwangathi 01, 2026 |
| npm | isibhamu-isipoki:219.0.0 | Kwangathi 01, 2026 |
| npm | ukusakaza-ukusakaza ikhodi: 1.0.15 | Kwangathi 02, 2026 |
| npm | i-shadxino:1.0.5 | Kwangathi 02, 2026 |
| npm | i-amazon-data-kiosk-monorepo:1.0.10 | Kwangathi 02, 2026 |
| npm | i-claude-code-best:2.0.1 | Kwangathi 03, 2026 |
| npm | i-apexpro:99.99.99 | Kwangathi 03, 2026 |
| npm | i-apexomni:99.99.99 | Kwangathi 03, 2026 |
| npm | i-apexomni:99.99.100 | Kwangathi 03, 2026 |
| npm | i-apexpro:99.99.100 | Kwangathi 03, 2026 |
| npm | isixazululo se-node-env:1.0.7 | Kwangathi 03, 2026 |
| npm | isixazululo se-node-env:1.0.8 | Kwangathi 03, 2026 |
| npm | @xp-izinsiza/iwebhu:99.0.0 | Kwangathi 03, 2026 |
| npm | isevisi ye-nextjs-chat-ne-ai:99.9.9 | Kwangathi 03, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.13 | Kwangathi 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.14 | Kwangathi 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.15 | Kwangathi 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.16 | Kwangathi 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.17 | Kwangathi 04, 2026 |
| npm | @alfa.life.mapp/app.web:99.0.19 | Kwangathi 04, 2026 |
| npm | @sbt_gitverse/iklayenti le-analytics:99.0.1 | Kwangathi 04, 2026 |
| npm | @sbt_gitverse/iklayenti le-analytics:99.0.4 | Kwangathi 04, 2026 |
| npm | @sbt_gitverse/iklayenti le-analytics:99.0.5 | Kwangathi 04, 2026 |
| npm | @tochka-ui/isisekelo:99.0.2 | Kwangathi 04, 2026 |
| npm | @tochka-ui/isisekelo:99.0.3 | Kwangathi 04, 2026 |
| npm | @tochka-ui/isisekelo:99.0.4 | Kwangathi 04, 2026 |
| npm | i-kl-b2c-ui-kit:99.0.1 | Kwangathi 04, 2026 |
| npm | i-kl-b2c-ui-kit:99.0.2 | Kwangathi 04, 2026 |
| npm | i-kl-b2c-ui-kit:99.0.3 | Kwangathi 04, 2026 |
| npm | i-pi-exa-mcp:99.9.11 | Kwangathi 04, 2026 |
| npm | i-pi-exa-mcp:99.9.12 | Kwangathi 04, 2026 |
| npm | i-google-cloud-secret-manager-config-poc:99.9.26 | Kwangathi 04, 2026 |
| npm | i-google-cloud-secret-manager-config-poc:99.9.33 | Kwangathi 04, 2026 |
| npm | i-google-cloud-secret-manager-config-poc:99.9.34 | Kwangathi 04, 2026 |
| npm | i-google-cloud-secret-manager-config-poc:99.9.35 | Kwangathi 04, 2026 |
| npm | i-google-cloud-secret-manager-config-poc:99.9.37 | Kwangathi 04, 2026 |
| npm | i-google-cloud-secret-manager-config-poc:99.9.38 | Kwangathi 04, 2026 |
| npm | i-google-cloud-secret-manager-config-poc:99.9.51 | Kwangathi 04, 2026 |
| npm | i-google-cloud-secret-manager-config-poc:99.9.53 | Kwangathi 04, 2026 |
| npm | ibhuloho lokukhokha le-paypal:99.9.9 | Kwangathi 04, 2026 |
| npm | ibhuloho lokukhokha le-paypal:100.1.1 | Kwangathi 04, 2026 |
| npm | ibhuloho lokukhokha le-paypal:100.1.4 | Kwangathi 04, 2026 |
| npm | ibhuloho lokukhokha le-paypal:100.1.6 | Kwangathi 04, 2026 |
| npm | ibhuloho lokukhokha le-paypal:100.1.9 | Kwangathi 04, 2026 |
| npm | ibhuloho lokukhokha le-paypal:100.2.8 | Kwangathi 04, 2026 |
| npm | isipiliyoni-sesisebenzi se-microsoft:99.2.2 | Kwangathi 05, 2026 |
| npm | isihlangu se-carp:0.1.0 | Kwangathi 05, 2026 |
| npm | i-fanduel:100.5.0 | Kwangathi 05, 2026 |
| npm | ama-exious:1.0.6 | Kwangathi 05, 2026 |
| npm | enterprise-umthombo-wesango lokuqinisekisa: 50.50.50 | Kwangathi 06, 2026 |
| npm | @saif777/codemirror5:7.66.4 | Kwangathi 06, 2026 |
| npm | @saif777/codemirror5:7.66.5 | Kwangathi 06, 2026 |
| npm | isevisi-yefulegi yesici: 2.0.1 | Kwangathi 06, 2026 |
| npm | isevisi-yefulegi yesici: 2.0.2 | Kwangathi 06, 2026 |
| npm | isevisi-yefulegi yesici: 2.0.3 | Kwangathi 06, 2026 |
| npm | uhlobo-btree:2.1.2 | Kwangathi 06, 2026 |
| npm | i-viem-core:1.0.0 | Kwangathi 06, 2026 |
| npm | i-viem-utils-core:1.0.0 | Kwangathi 06, 2026 |
| npm | i-hardhat-core-utils:1.0.0 | Kwangathi 06, 2026 |
| npm | i-veltrix:1.0.0 | Kwangathi 06, 2026 |
| npm | i-evm-utils:1.0.0 | Kwangathi 06, 2026 |
| npm | i-web3-utils-core:1.0.0 | Kwangathi 06, 2026 |
| npm | izinto zokwenziwa kwe-foundry:1.0.0 | Kwangathi 06, 2026 |
| npm | uhlelo lokusebenza lwe-carbonite:99.9.0 | Kwangathi 07, 2026 |
| npm | i-carbonite-yangaphakathi:99.9.0 | Kwangathi 07, 2026 |
| npm | ibheji-lemali-evulekile-rpc:200.99.100 | Kwangathi 07, 2026 |
| npm | 24712-pl5006:0.0.1 | Kwangathi 07, 2026 |
| i-openvsx | eriklynd/json-tools:20.1.2 | Kwangathi 07, 2026 |
| npm | i-invixco:1.0.4 | Kwangathi 07, 2026 |
| npm | i-ejenti yezempilo ye-win-sys:1.0.2 | Kwangathi 08, 2026 |
| npm | ukusethwa kwe-win-env: 3.0.6 | Kwangathi 08, 2026 |
| npm | i-ejenti yezempilo ye-win-sys:1.0.3 | Kwangathi 08, 2026 |
Vikela Uchungechunge Lwakho Lokunikezela Isofthiwe Ebuthakathakeni kanye Nekhodi Enonya
Ukuhlaselwa kwe-software supply chain akusezona izinsongo ezingokwengqondo. Amaphakheji anonya, i-malware eqaphela i-AI, ukuhlaselwa kokudideka kokuthembela, ukweba iziqinisekiso, kanye namathuluzi onjiniyela anobuthi kuhlose ngenkuthalo isimanje. SDLCs, CI/CD pipelines, kanye nezindawo zokuthuthukiswa ezisizwa yi-AI.
Ngokutholakala Kwe-Malware Yasekuqaleni kwe-Xygeni kanye software supply chain security ipulatifomu, izinhlangano zingabona futhi zivimbele ukuncika okunonya ngaphambi kokuba zifinyelele ezindaweni zokusebenza zonjiniyela, zakhe izinhlelo, noma zikhiqize pipelines.
I-Xygeni iqapha njalo izimiso zemvelo ezifana ne-npm, i-PyPI, i-VS Code, kanye ne-OpenVSX ukuthola amaphakheji anonya, amaphethini okushicilela okusolisayo, ukubhala phansi amagama, ukusetshenziswa kabi kwesikhala samagama, ukuziphatha kokwebiwa kweziqinisekiso, kanye nezinsongo zochungechunge lokuhlinzekwa oluqhutshwa yi-AI ngesikhathi sangempela. Okutholakele kubekwa phambili ngokuzenzakalelayo ngokusekelwe ekusetshenzisweni, ukufinyeleleka, kanye nomthelela wokusebenza ukuze amaqembu akwazi ukugxila ezingozini ezibalulekile ngempela.
Kusukela kumaphakheji e-npm anonya kanye nokuncika kwe-OSS okuphazamisekile kuya ezingozini zekhodi ezikhiqizwe yi-AI kanye namathuluzi onjiniyela anobuthi, i-Xygeni isiza amaqembu okuphepha nawobunjiniyela ukuthi alondoloze ukubonakala, ukwethembana, kanye nokulawula kulo lonke uchungechunge lokuhlinzekwa kwesofthiwe yesimanje.
Ukuze uhlole imikhankaso yakamuva ye-malware kanye namaphakheji aqinisekisiwe e-malware atholwe yi-Xygeni Security Team, vakashela i- I-Malacious Code Digest.
Hlala uphephile. Hlala ushesha. Hlala ulawula i-Xygeni.
