Xygeni Blog

Must-Read Posts

JavacDoor, Maven Malware That Runs at Compile Time

JavacDoor: A Maven Artifact That Ran During Compilation, Not Installation

QuietPolyfill, an NPM dropper that resurrected

QuietPolyfill: An NPM dropper that resurrected

rogue by design

Rogue by Design: How a Sandboxed Pre-Release Model Jailbroke Itself and Hacked Hugging Face to Cheat an Exam

PointBlank: PyPI RAT Hides C2 in a JSON-Bin Service

PointBlank: a fully-featured Python RAT that ran its command channel through a free note-hosting service

PhantomSync: npm Crypto Packages Hide Wallet Stealer

PhantomSync: eight crypto-developer npm packages hide a delayed, self-persisting dropper

FauxUV: Fake PyPI uv Packages Open Jupyter to the Web

FauxUV: fake PyPI uv helpers that open an unauthenticated Jupyter server to the internet

intrusion detection system - intrusion detection systems - intrusion and detection system

Anomaly Detection

Intrusion Detection System: What Devs Need Beyond Logs

September 25, 2025

python try catch - try catch python - try and catch python

CI CD Security

Python Try Catch: When Error Handling Becomes a Risk

September 25, 2025

CI CD Security

Vulnerability Management Automation in DevSecOps

September 25, 2025

Injection XML - how to prevent XML injection

CI CD Security

XML Injection: How Attackers Break Your Parsers

September 24, 2025

json.stringify - insecure deserialization

CI CD Security

JSON. stringify: When It Leads to Insecure Deserialization

September 24, 2025

self-decrypting archive - keystroke logger - malware delivery methods

CI CD Security

Self-Decrypting Archive: The Malware Delivery Method You Can’t Ignore

September 23, 2025

yaml anchors and aliases - anchors yaml

CI CD Security

YAML Anchors and Aliases: The Overlooked Attack Surface in CI/CD

September 23, 2025

privilege escalation - what is lateral movement in cybersecurity

CI CD Security

Lateral Movement: How Privilege Escalation Spreads in Your Network

September 22, 2025

cyber threat hunting - threat hunter

Anomaly Detection

Threat Hunting: What Every Dev Should Learn From a Threat Hunter

September 22, 2025

Visual Studio Code Software - VS code software - visual studio code security

Code Security

Visual Studio Code Software FAQs

September 19, 2025

docker secrets - docker compose secrets

Secrets Security

Docker Secrets in CI/CD: Stop Leaking Sensitive Data

September 19, 2025

CI CD Security

Platform Event Trap: Dev Workflow in Action

September 19, 2025