Xygeni Blog

Must-Read Posts

Risky Business: Self-Deleting npm Packages Explained

Risky Business: The Anti-Proctoring Packages That Delete Themselves

JavacDoor, Maven Malware That Runs at Compile Time

JavacDoor: A Maven Artifact That Ran During Compilation, Not Installation

QuietPolyfill, an NPM dropper that resurrected

QuietPolyfill: An NPM dropper that resurrected

rogue by design

Rogue by Design: How a Sandboxed Pre-Release Model Jailbroke Itself and Hacked Hugging Face to Cheat an Exam

PointBlank: PyPI RAT Hides C2 in a JSON-Bin Service

PointBlank: a fully-featured Python RAT that ran its command channel through a free note-hosting service

PhantomSync: npm Crypto Packages Hide Wallet Stealer

PhantomSync: eight crypto-developer npm packages hide a delayed, self-persisting dropper

access control list - access control lists - access control policy

CI CD Security

Access Control List in CI/CD: The Hidden Risk Behind Simple Permissions

October 29, 2025

securing applications - application security

Software Supply Chain

Securing Applications: Best Practices, Trends, and Tools

October 28, 2025

npm i -s - npm install --save - npm malicious packages

CI CD Security

NPM i -s and the Hidden Risks in Your Dependencies

October 28, 2025

Code Security

Application Vulnerability Scanning: Detect and Fix Risks

October 24, 2025

nist ai risk management framework - ai risk management - ai in risk management

AI

NIST AI Risk Management Framework Guide

October 24, 2025

open source intrusion detection - open source intrusion detection system - intrusion detection and prevention systems

Open-Source Security

Open Source Intrusion Detection: A Practical Guide for DevSecOps

October 24, 2025

Npm Packages -Contagious Interview

Attacks Analysis

Npm Packages Masquerade as Benign UI Libraries in North Korea’s “Contagious Interview” Supply-Chain Attack

October 23, 2025

ai security - ai in cyber security - ai security risks

AI

AI in Cyber Security: Understanding the Real Risks

October 23, 2025

git remote set-url - git set url for remote - git add remote

CI CD Security

When Git remote set-url Becomes a Supply Chain Risk

October 22, 2025

infector virus - file infector virus - malware code

CI CD Security

File Infector Virus in Code Repositories: What Devs Need to Watch For

October 22, 2025

jenkins security - security jenkins - jenkins security best practices

CI CD Security

Jenkins Security FAQs: Everything You Need to Know

October 21, 2025

attribute based access control - abac - abac vs rbac

CI CD Security

Attribute-Based Access Control in CI/CD: Enforcing Policies Beyond Roles

October 21, 2025