Xygeni Blog

Must-Read Posts

JavacDoor, Maven Malware That Runs at Compile Time

JavacDoor: A Maven Artifact That Ran During Compilation, Not Installation

QuietPolyfill, an NPM dropper that resurrected

QuietPolyfill: An NPM dropper that resurrected

rogue by design

Rogue by Design: How a Sandboxed Pre-Release Model Jailbroke Itself and Hacked Hugging Face to Cheat an Exam

PointBlank: PyPI RAT Hides C2 in a JSON-Bin Service

PointBlank: a fully-featured Python RAT that ran its command channel through a free note-hosting service

PhantomSync: npm Crypto Packages Hide Wallet Stealer

PhantomSync: eight crypto-developer npm packages hide a delayed, self-persisting dropper

FauxUV: Fake PyPI uv Packages Open Jupyter to the Web

FauxUV: fake PyPI uv helpers that open an unauthenticated Jupyter server to the internet

requirements.txt - pip install requirements.txt - pip freeze requirements.txt

CI CD Security

Hidden Dangers of Requirements.txt: How Dependency Pinning Can Save You

September 19, 2025

does cyber security require coding - do you need to know coding for cyber security

Code Security

Does Cyber Security Require Coding?

September 19, 2025

how can an attacker execute malware through a script - cross scripting attack - cross site scripting attack - prevent cross site scripting attack

Code Security

How Can an Attacker Execute Malware Through a Script?

September 18, 2025

how to escape python -v command in terminal -command injection attack

CI CD Security

How to Escape Python -v Command in Terminal

September 18, 2025

how are jwt tokens secure - jwt validation - jwt security

CI CD Security

How Are JWT Tokens Secure? Common Validation Flaws Developers Miss

September 18, 2025

what is man-in-the-middle attack

CI CD Security

Man-in-the-Middle Attack in DevOps: How Insecure Pipelines Get Hijacked

September 18, 2025

Shai hulud - npm packages - supply chain attack

Attacks Analysis

Shai-Hulud: The npm Packages Worm Explained

September 17, 2025

git pre-commit hook

Open-Source Security

Why Pre-Commit Hooks Fail at Stopping Secrets

September 17, 2025

broken authentication - session management- oauth security - authentication vulnerabilities

CI CD Security

The Broken Authentication Nightmare: Why Simple Logins Can Be Hacked

September 16, 2025

git log - git stash- git rebase - git filter-repo

Secrets Security

Why git log Still Shows Your Secrets: Git Commit History Never Forgets

September 15, 2025

how to decompile a compiled python file - python decompiler

CI CD Security

How to Decompile a Compiled Python File (and Why It’s a Security Risk)

September 15, 2025

what is cve in cyber security - cve security - cve in cyber security

Open-Source Security

CVE Security Under Pressure: Navigating Challenges and Strengthening Vulnerability Management in DevSecOps

September 10, 2025