Xygeni Blog

Must-Read Posts

JavacDoor, Maven Malware That Runs at Compile Time

JavacDoor: A Maven Artifact That Ran During Compilation, Not Installation

QuietPolyfill, an NPM dropper that resurrected

QuietPolyfill: An NPM dropper that resurrected

rogue by design

Rogue by Design: How a Sandboxed Pre-Release Model Jailbroke Itself and Hacked Hugging Face to Cheat an Exam

PointBlank: PyPI RAT Hides C2 in a JSON-Bin Service

PointBlank: a fully-featured Python RAT that ran its command channel through a free note-hosting service

PhantomSync: npm Crypto Packages Hide Wallet Stealer

PhantomSync: eight crypto-developer npm packages hide a delayed, self-persisting dropper

FauxUV: Fake PyPI uv Packages Open Jupyter to the Web

FauxUV: fake PyPI uv helpers that open an unauthenticated Jupyter server to the internet

SDLC

Software Development Security Best Practices

October 20, 2025

Risks of Open Source Software -open source risks

Open-Source Security

The Risks of Open Source Software

October 20, 2025

Zero Day Vulnerability -Zero Day Vulnerability Exploits - Zero Day exploit

Attacks Analysis

Zero Day Vulnerability: Detect and Block Attacks Early

October 16, 2025

java security -java security best practices - secure java applications

Code Security

Java Security FAQs: Everything You Need to Know

October 16, 2025

malware protection - protection from malware - best malware protection

CI CD Security

Malware Protection: Why Antivirus Can’t Stop Supply Chain Attacks

October 16, 2025

how to bypass scratch paywall - pass paywall - bypass paywalls extension

CI CD Security

Why “How to Bypass Scratch Paywall” Searches Lead You to Malware Instead

October 15, 2025

browser agent security risk - user agent spoofer

CI CD Security

Browser Agent Security Risk: Why Relying on User-Agent Strings Is Dangerous

October 15, 2025

what is vishing in cybersecurity - vishing attack

CI CD Security

What Is Vishing in Cybersecurity and Why It Targets Developers Too

October 14, 2025

azure devops repos - azure repos - azure vulnerability scanning

CI CD Security

Automated Security Scans for Azure DevOps Repos

October 13, 2025

spof single point of failure - single points of failure

CI CD Security

Single Point of Failure in CI/CD: Why SPOF Still Breaks Your Pipeline

October 13, 2025

Block Encoding - character encoding in python - data encoder

CI CD Security

Block Encoding Pitfalls: When Data Handling Becomes a Security Risk

October 13, 2025

python security - python cyber security - pypi security

Code Security

Python Security FAQs: Everything You Need to Know

October 10, 2025