Xygeni Blog

Must-Read Posts

Risky Business: Self-Deleting npm Packages Explained

Risky Business: The Anti-Proctoring Packages That Delete Themselves

JavacDoor, Maven Malware That Runs at Compile Time

JavacDoor: A Maven Artifact That Ran During Compilation, Not Installation

QuietPolyfill, an NPM dropper that resurrected

QuietPolyfill: An NPM dropper that resurrected

rogue by design

Rogue by Design: How a Sandboxed Pre-Release Model Jailbroke Itself and Hacked Hugging Face to Cheat an Exam

PointBlank: PyPI RAT Hides C2 in a JSON-Bin Service

PointBlank: a fully-featured Python RAT that ran its command channel through a free note-hosting service

PhantomSync: npm Crypto Packages Hide Wallet Stealer

PhantomSync: eight crypto-developer npm packages hide a delayed, self-persisting dropper

what does whitelist mean - what does whitelisting mean - whitelist meaning

CI CD Security

What Does Whitelist Mean in Cybersecurity (and Why Devs Should Stop Using It)?

October 21, 2025

SDLC

Software Development Security Best Practices

October 20, 2025

Risks of Open Source Software -open source risks

Open-Source Security

The Risks of Open Source Software

October 20, 2025

Zero Day Vulnerability -Zero Day Vulnerability Exploits - Zero Day exploit

Attacks Analysis

Zero Day Vulnerability: Detect and Block Attacks Early

October 16, 2025

java security -java security best practices - secure java applications

Code Security

Java Security FAQs: Everything You Need to Know

October 16, 2025

malware protection - protection from malware - best malware protection

CI CD Security

Malware Protection: Why Antivirus Can’t Stop Supply Chain Attacks

October 16, 2025

how to bypass scratch paywall - pass paywall - bypass paywalls extension

CI CD Security

Why “How to Bypass Scratch Paywall” Searches Lead You to Malware Instead

October 15, 2025

browser agent security risk - user agent spoofer

CI CD Security

Browser Agent Security Risk: Why Relying on User-Agent Strings Is Dangerous

October 15, 2025

what is vishing in cybersecurity - vishing attack

CI CD Security

What Is Vishing in Cybersecurity and Why It Targets Developers Too

October 14, 2025

azure devops repos - azure repos - azure vulnerability scanning

CI CD Security

Automated Security Scans for Azure DevOps Repos

October 13, 2025

spof single point of failure - single points of failure

CI CD Security

Single Point of Failure in CI/CD: Why SPOF Still Breaks Your Pipeline

October 13, 2025

Block Encoding - character encoding in python - data encoder

CI CD Security

Block Encoding Pitfalls: When Data Handling Becomes a Security Risk

October 13, 2025