Xygeni Blog

Must-Read Posts

JavacDoor, Maven Malware That Runs at Compile Time

JavacDoor: A Maven Artifact That Ran During Compilation, Not Installation

QuietPolyfill, an NPM dropper that resurrected

QuietPolyfill: An NPM dropper that resurrected

rogue by design

Rogue by Design: How a Sandboxed Pre-Release Model Jailbroke Itself and Hacked Hugging Face to Cheat an Exam

PointBlank: PyPI RAT Hides C2 in a JSON-Bin Service

PointBlank: a fully-featured Python RAT that ran its command channel through a free note-hosting service

PhantomSync: npm Crypto Packages Hide Wallet Stealer

PhantomSync: eight crypto-developer npm packages hide a delayed, self-persisting dropper

FauxUV: Fake PyPI uv Packages Open Jupyter to the Web

FauxUV: fake PyPI uv helpers that open an unauthenticated Jupyter server to the internet

Open-Source Security

FastAPI Security FAQs: What Developers Should Know

November 6, 2025

c# dictionary - dictionary in c sharp - dictionary c# - data integrity -concurrency

Secrets Security

C# Dictionary: The Subtle Bugs That Break Data Integrity

November 6, 2025

c# switch - switch case c# - switch condition in c#

Code Security

C# Switch Statements and Hidden Logic Bugs in Secure Code

November 6, 2025

Code Security

C# Dependency Injection: Scoped vs Singleton Mistakes That Expose Your App

November 5, 2025

c# enum - c# enum enum - c sharp enum - flag enums

Code Security

Misuse in C# Enum: How Simple Flags Cause Big Security Issues

November 5, 2025

yagni - secure coding principles - clean code

CI CD Security

YAGNI and Secure Code: Why “Not Yet” Can Save You From Bugs

November 4, 2025

serilog - c# logging - serilog configuration - secure logging

Secrets Security

Serilog Pitfalls: When Logging Becomes a Data Leak

November 3, 2025

osint framework - open source intelligence - open source intelligence tools

Open-Source Security

OSINT Framework: How DevSecOps Teams Use Open Source Intelligence

October 31, 2025

hugging face ai - hugging face security - how to use hugging face

AI

Hugging Face AI Faqs

October 31, 2025

gitlab vs github - github vs gitlab - difference between github and gitlab

Code Security

GitLab vs GitHub: Key Differences for DevSecOps Teams

October 30, 2025

automapper c# - automapper in c# - object mapping

Code Security

Automapper in C#: How Automapper Configurations Can Lead to Data Exposure

October 29, 2025

access control list - access control lists - access control policy

CI CD Security

Access Control List in CI/CD: The Hidden Risk Behind Simple Permissions

October 29, 2025