Category: Open-Source Security

Must-Read Posts

Risky Business: Self-Deleting npm Packages Explained

Risky Business: The Anti-Proctoring Packages That Delete Themselves

JavacDoor, Maven Malware That Runs at Compile Time

JavacDoor: A Maven Artifact That Ran During Compilation, Not Installation

QuietPolyfill, an NPM dropper that resurrected

QuietPolyfill: An NPM dropper that resurrected

rogue by design

Rogue by Design: How a Sandboxed Pre-Release Model Jailbroke Itself and Hacked Hugging Face to Cheat an Exam

PointBlank: PyPI RAT Hides C2 in a JSON-Bin Service

PointBlank: a fully-featured Python RAT that ran its command channel through a free note-hosting service

PhantomSync: npm Crypto Packages Hide Wallet Stealer

PhantomSync: eight crypto-developer npm packages hide a delayed, self-persisting dropper

Open-Source Security, Software Supply Chain

Zero Day Attack Essentials: What You Need to Know to Secure Your Systems

Learn all about Zero-Day Attack Prevention. Discover typical exploit mechanisms, real cases and much more!

April 23, 2024

Fátima Said

8 min read

CI/CD Security, Open-Source Security

Understanding the Landscape of Open-Source Software Security

The landscape of Open-Source Software Security is a study in contrasts. Take a quick peek at our post and learn all about OSS Security!

March 12, 2024

Fátima Said

6 min read

Open-Source Security, Software Supply Chain

How to detect and solve misconfiguration problems

Ensure your platform is correctly configured: deliver stable & reliable services to your users. Learn how to detect and solve misconfiguration

January 3, 2023

Xygeni Security Team

6 min read