Xygeni Blog

Must-Read Posts

Risky Business: Self-Deleting npm Packages Explained

Risky Business: The Anti-Proctoring Packages That Delete Themselves

JavacDoor, Maven Malware That Runs at Compile Time

JavacDoor: A Maven Artifact That Ran During Compilation, Not Installation

QuietPolyfill, an NPM dropper that resurrected

QuietPolyfill: An NPM dropper that resurrected

rogue by design

Rogue by Design: How a Sandboxed Pre-Release Model Jailbroke Itself and Hacked Hugging Face to Cheat an Exam

PointBlank: PyPI RAT Hides C2 in a JSON-Bin Service

PointBlank: a fully-featured Python RAT that ran its command channel through a free note-hosting service

PhantomSync: npm Crypto Packages Hide Wallet Stealer

PhantomSync: eight crypto-developer npm packages hide a delayed, self-persisting dropper

tj-actions/changed-files - CVE-2025-30066 - secret leakage

Code Security

CVE‑2025‑30066: When tj‑actions/changed‑files Leads to Secret Leakage

July 30, 2025

insecure direct object reference - what is IDOR vulnerability

CI CD Security

What Happens When You Don’t Lock Object Access? Hello, IDOR Vulnerability

July 30, 2025

stride threat modeling framework

Code Security

STRIDE Threat Model: The “What Can Go Wrong?” Framework

July 30, 2025

what is arp spoofing attack

Software Supply Chain

What Is ARP Spoofing? A No-Nonsense Explainer for Developers

July 30, 2025

GitOps vs DevOps - GitOps tools

Code Security

GitOps vs DevOps: What Developers See in Projects

July 30, 2025

which of the following may indicate a malicious code attack - how can malicious code spread

Code Security

Which of the Following May Indicate a Malicious Code Attack?

July 30, 2025

How Can Generative AI Be Used in Cybersecurity, will cybersecurity be replaced by AI, cybersecurity remediation

AI

How Can Generative AI Be Used in Cybersecurity?

July 29, 2025

cybersecurity checklist- software security checklist - application security best practices checklist- cybersecurity audit checklist

ASPM

Cybersecurity Checklist for DevOps Teams

July 29, 2025

Bitbucket Security-bitbucket- bitbucket security best practices

CI CD Security

Bitbucket Security FAQs: What Every Developer Should Know

July 28, 2025

What Are the 5 Key Stages of the Resilience Lifecycle Framework (2)

SDLC

What Are the 5 Key Stages of the Resilience Lifecycle Framework

July 24, 2025

how can i prevent the use of my source code - source code security - code integrity- source code security scanning tools

Code Security

Source Code Security: Best Practices to Protect Your Code Integrity

July 24, 2025

Code Security

Critical System Protection Starts in Dev, Not in Prod

July 24, 2025