Xygeni Blog

Must-Read Posts

JavacDoor, Maven Malware That Runs at Compile Time

JavacDoor: A Maven Artifact That Ran During Compilation, Not Installation

QuietPolyfill, an NPM dropper that resurrected

QuietPolyfill: An NPM dropper that resurrected

rogue by design

Rogue by Design: How a Sandboxed Pre-Release Model Jailbroke Itself and Hacked Hugging Face to Cheat an Exam

PointBlank: PyPI RAT Hides C2 in a JSON-Bin Service

PointBlank: a fully-featured Python RAT that ran its command channel through a free note-hosting service

PhantomSync: npm Crypto Packages Hide Wallet Stealer

PhantomSync: eight crypto-developer npm packages hide a delayed, self-persisting dropper

FauxUV: Fake PyPI uv Packages Open Jupyter to the Web

FauxUV: fake PyPI uv helpers that open an unauthenticated Jupyter server to the internet

CI CD Security

Security Guardrails for CI/CD Pipelines

October 8, 2025

best practice analyser - ci cd pipeline security best practices - pipeline security

CI CD Security

Best Practice Analyzer for CI/CD Pipelines

October 8, 2025

cvss score - cvss scoring - cvss calculator - cvss score calculator

Open-Source Security

CVSS Score Explained: How CVSS Scoring Really Works

October 8, 2025

authentication token manipulation error - passwd authentication token manipulation error

CI CD Security

Authentication Token Manipulation Error: Why Your Sessions Aren’t Safe?

October 7, 2025

Docker Build -t - docker build command - docker build -t option

CI CD Security

Docker Build -t Explained: Secure Image Tagging in Your Pipeline

October 7, 2025

server side template injection - ssti vulnerability - ssti payloads

CI CD Security

Server Side Template Injection Explained with Real Code Examples

October 6, 2025

docker registry - container registry -malicious docker images

CI CD Security

Securing Your Docker Registry: Don’t Let Malicious Images Into Your Pipeline

October 6, 2025

Function Result 2 Error Code 0 - error: gradle task assembledebug failed with exit code 1

CI CD Security

Function Result 2 Error Code 0 in CI/CD: What It Really Means

October 5, 2025

try except python - python try except else

CI CD Security

Python Try Except Blocks: Debugging vs. Security Trade-Offs

October 4, 2025

Open-Source Security

Risk Remediation: Avoid Breaking Changes

October 3, 2025

sast scan - sast scanning tools- sast scanning tools

Code Security

SAST Scan with Xygeni: Secure Code at Speed

October 3, 2025

open source intrusion detection - intrusion detection and prevention systems open source - open source intrusion detection tools - intrusion detection system open source

Open-Source Security

Open Source Intrusion Detection Tools and Systems

October 2, 2025