Xygeni Blog

Must-Read Posts

SeedSweep: Ten Malicious npm Crypto Packages

SeedSweep: Ten Crypto-Themed npm Packages That Only Run When No One Is Watching

PairLoop: Hidden Remote-Control Panel in npm Package

PairLoop: One npm Package, Seventy Versions, and a Hidden Windows Remote-Control Panel

ConsentMask The npm Package Hiding Developer Identity Harvesting

ConsentMask: An npm Package That Wears a Telemetry Consent Banner Over Developer-Identity Harvesting

JulesJacker: Fake npm Worm Impersonates Jules AI

JulesJacker: A Fake-PoC npm Worm That Impersonates Google’s Jules Agent — and Turns on the Sandbox Analyzing It

RuntimeBroker npm Typosquat Plants Crypto Clipper

RuntimeBroker: an npm Typosquat Plants a 40-Chain Crypto-Clipper as a Cross-OS \”System Runtime Helper”\

AuditorTrap

AuditorTrap: A 22-Package Fake Crypto Security Guild on npm With Two Parallel Payloads

python try catch - try catch python - try and catch python

CI CD Security

Python Try Catch: When Error Handling Becomes a Risk

September 25, 2025

CI CD Security

Vulnerability Management Automation in DevSecOps

September 25, 2025

Injection XML - how to prevent XML injection

CI CD Security

XML Injection: How Attackers Break Your Parsers

September 24, 2025

json.stringify - insecure deserialization

CI CD Security

JSON. stringify: When It Leads to Insecure Deserialization

September 24, 2025

self-decrypting archive - keystroke logger - malware delivery methods

CI CD Security

Self-Decrypting Archive: The Malware Delivery Method You Can’t Ignore

September 23, 2025

yaml anchors and aliases - anchors yaml

CI CD Security

YAML Anchors and Aliases: The Overlooked Attack Surface in CI/CD

September 23, 2025

privilege escalation - what is lateral movement in cybersecurity

CI CD Security

Lateral Movement: How Privilege Escalation Spreads in Your Network

September 22, 2025

cyber threat hunting - threat hunter

Anomaly Detection

Threat Hunting: What Every Dev Should Learn From a Threat Hunter

September 22, 2025

Visual Studio Code Software - VS code software - visual studio code security

Code Security

Visual Studio Code Software FAQs

September 19, 2025

docker secrets - docker compose secrets

Secrets Security

Docker Secrets in CI/CD: Stop Leaking Sensitive Data

September 19, 2025

CI CD Security

Platform Event Trap: Dev Workflow in Action

September 19, 2025

requirements.txt - pip install requirements.txt - pip freeze requirements.txt

CI CD Security

Hidden Dangers of Requirements.txt: How Dependency Pinning Can Save You

September 19, 2025