Xygeni Blog

Must-Read Posts

JavacDoor, Maven Malware That Runs at Compile Time

JavacDoor: A Maven Artifact That Ran During Compilation, Not Installation

QuietPolyfill, an NPM dropper that resurrected

QuietPolyfill: An NPM dropper that resurrected

rogue by design

Rogue by Design: How a Sandboxed Pre-Release Model Jailbroke Itself and Hacked Hugging Face to Cheat an Exam

PointBlank: PyPI RAT Hides C2 in a JSON-Bin Service

PointBlank: a fully-featured Python RAT that ran its command channel through a free note-hosting service

PhantomSync: npm Crypto Packages Hide Wallet Stealer

PhantomSync: eight crypto-developer npm packages hide a delayed, self-persisting dropper

FauxUV: Fake PyPI uv Packages Open Jupyter to the Web

FauxUV: fake PyPI uv helpers that open an unauthenticated Jupyter server to the internet

vibe coding, vibe code, what is vibe coding, vibe cooding tools.

Code Security

Vibe Coding: Trend or Security Risk?

July 9, 2025

how to merge branches in github, cancel merge github , branch github

Anomaly Detection

Create a Branch in GitHub and Merge Safely

July 8, 2025

Auto Remediation for Modern DevSecOps

Code Security

Auto Remediation for Modern DevSecOps: Fix Fast

July 4, 2025

Software Supply Chain Attacks 2025 - malicious packages - malicious python packages - malicious npm packages

Open-Source Security

A Closer Look at Software Supply Chain Attacks 2025: PyPI & npm Campaigns Compared

July 3, 2025

sca and sbom - sca vs sbom - sbom vs SCA - sca sbom -

Open-Source Security

SCA vs SBOM: What’s the Difference and Why You Need Both

July 2, 2025

developer prevent hacking - what are some practices to prevent hacking- how to prevent hacking

Code Security

How can a Developer Prevent Hacking? Start With SAST and SCA

June 25, 2025

open source software vulnerability scanner - vulnerability scanner open source - open source vulnerability scanner software used in cybersecurity

Code Security

Open Source Vulnerability Scanner: Are They Enough?

June 17, 2025

OWASP AppSec - OWASP Global AppSec - auto remediation

Code Security

OWASP AppSec 2025: Key Takeaways, Auto Remediation with AI, and What’s Coming Next

June 17, 2025

governance risk and compliance software solutions - data governance software - what is grc

SDLC

Governance Risk and Compliance Software, Without the Headache

June 10, 2025

Cybersecurity for Software Applications - cybersecurity software - cybersecurity vs software engineering

SDLC

Cybersecurity for Software Applications: A DevOps-First Look

June 10, 2025

How to Detect Malware - malware detection service - malware detection engine

CI CD Security

How to Detect Malware in Your CI/CD Pipeline Before It Reaches Production

May 30, 2025

ai-powered static application security testing - AI SAST - AI Code Security

AI

AI SAST with AutoFix for DevOps Teams

May 30, 2025