Xygeni Blog

Must-Read Posts

JavacDoor, Maven Malware That Runs at Compile Time

JavacDoor: A Maven Artifact That Ran During Compilation, Not Installation

QuietPolyfill, an NPM dropper that resurrected

QuietPolyfill: An NPM dropper that resurrected

rogue by design

Rogue by Design: How a Sandboxed Pre-Release Model Jailbroke Itself and Hacked Hugging Face to Cheat an Exam

PointBlank: PyPI RAT Hides C2 in a JSON-Bin Service

PointBlank: a fully-featured Python RAT that ran its command channel through a free note-hosting service

PhantomSync: npm Crypto Packages Hide Wallet Stealer

PhantomSync: eight crypto-developer npm packages hide a delayed, self-persisting dropper

FauxUV: Fake PyPI uv Packages Open Jupyter to the Web

FauxUV: fake PyPI uv helpers that open an unauthenticated Jupyter server to the internet

CTF token - invalid csrf token - google ctf

Secrets Security

CTF Tokens, CSRF Mistakes, and Leaked Secrets

August 7, 2025

err_ssl_protocol_error - ssl and tls vulnerabilities - data in transit encryption

CI CD Security

ERR_SSL_PROTOCOL_ERROR: Causes, Fixes & TLS Security in CI/CD

August 7, 2025

which of the following are common causes of breaches - what is a data breach - how to prevent data breach

Attacks Analysis

Which of the Following Are Common Causes of Breaches?

August 6, 2025

github games - github unblocked games -github io games

Open-Source Security

GitHub Games with PreBuild Malware? It’s Happening

August 5, 2025

cybersecurity putting yourself in the mind of a hacker - white hat hacking - what is a white hat hacker

Open-Source Security

Cybersecurity, Putting Yourself in the Mind of a Hacker

August 5, 2025

What Xygeni Can Do To Increase Security

ASPM

What Xygeni Can Do To Increase Security?

August 5, 2025

Gitlab Security -Gitlab Security

CI CD Security

Gitlab Security FAQs: What Every Developer Should Know

August 4, 2025

dosfuscation - obfuscation techniques - types of denial of service attacks

Secrets Security

Dosfuscation: The Hidden Denial-of-Service Threat in Your Dependencies

August 1, 2025

Third Party Risk Management Software

Open-Source Security

Third Party Risk Management Software for Developers

August 1, 2025

crackhash - password cracking - hash cracking techniques

Secrets Security

How Attackers Use Crackhash for Password Cracking, And How to Stop Them

July 31, 2025

Hardcoding,hashicorp vault, secrets management

Secrets Security

How to Stop Hardcoding Secrets with HashiCorp Vault

July 30, 2025

tj-actions/changed-files - CVE-2025-30066 - secret leakage

Code Security

CVE‑2025‑30066: When tj‑actions/changed‑files Leads to Secret Leakage

July 30, 2025