Xygeni Blog

Must-Read Posts

open-source packages

Protecting Against Open Source Malicious Packages: What Does (Not) Work

Malicious Packages 5

Anatomy of Malicious Packages: What Are the Trends?

Open Source Malicious Packages: The Problem

XZ Backdoor Attack

XZ Backdoor: “That was a close one”

Visual Studio Code Software - VS code software - visual studio code security

Code Security

Visual Studio Code Software FAQs

September 19, 2025

docker secrets - docker compose secrets

Secrets Security

Docker Secrets in CI/CD: Stop Leaking Sensitive Data

September 19, 2025

CI CD Security

Platform Event Trap: Dev Workflow in Action

September 19, 2025

requirements.txt - pip install requirements.txt - pip freeze requirements.txt

CI CD Security

Hidden Dangers of Requirements.txt: How Dependency Pinning Can Save You

September 19, 2025

does cyber security require coding - do you need to know coding for cyber security

Code Security

Does Cyber Security Require Coding?

September 19, 2025

how can an attacker execute malware through a script - cross scripting attack - cross site scripting attack - prevent cross site scripting attack

Code Security

How Can an Attacker Execute Malware Through a Script?

September 18, 2025

how to escape python -v command in terminal -command injection attack

CI CD Security

How to Escape Python -v Command in Terminal

September 18, 2025

how are jwt tokens secure - jwt validation - jwt security

CI CD Security

How Are JWT Tokens Secure? Common Validation Flaws Developers Miss

September 18, 2025

what is man-in-the-middle attack

CI CD Security

Man-in-the-Middle Attack in DevOps: How Insecure Pipelines Get Hijacked

September 18, 2025

Shai hulud - npm packages - supply chain attack

Attacks Analysis

Shai-Hulud: The npm Packages Worm Explained

September 17, 2025

git pre-commit hook

Open-Source Security

Why Pre-Commit Hooks Fail at Stopping Secrets

September 17, 2025

broken authentication - session management- oauth security - authentication vulnerabilities

CI CD Security

The Broken Authentication Nightmare: Why Simple Logins Can Be Hacked

September 16, 2025