Xygeni Logo White
Start Free
Book a demo

Xygeni Blog

Must-Read Posts

Code Quality Check vs. Code Security Check

Code Quality Check vs. Code Security Check: What’s the Difference?

Code quality checks and code security checks measure different things. See now what each catches, and how to run both from one platform.
8 min read
Vibe Coding Security

Vibe Coding Security: What Happens When “It Works” Replaces “I Reviewed It”

Vibe coding security is the gap most AppSec tools miss. "It works" isn't "it's safe." See the real risks before they ship to production.
8 min read
Xygeni AI Shield

Xygeni AI Shield: Stop AI-Generated Malicious Packages

AI tools now write and publish malicious packages in minutes. See how Xygeni AI Shield blocks them before they execute. Free plan available.
8 min read
JavacDoor, Maven Malware That Runs at Compile Time

JavacDoor: A Maven Artifact That Ran During Compilation, Not Installation

A Maven jar with zero install hooks and zero imports still ran a live C2 payload, just by sitting on the compiler's path. Dive in!
10 min read
When AI Agents Install Dependencies

AI Agent Supply Chain Security: What Stops a Bad Dependency When AI Agents Install It

AI agent supply chain security is failing as agents install packages and edit pipelines unsupervised. Here's what actually stands in the way.
9 min read
API Security

API Security Has Been a Runtime Problem. It Doesn’t Have to Be

Most API security tools catch risk after it's live. Static analysis mapped to the OWASP API Top 10 catches it in the pull request instead.
7 min read
Npm Supply Chain Attacks

Npm Supply Chain Attacks: Biggest Incidents & How to Stop Them

A timeline of the biggest npm supply chain attacks, from Shai-Hulud to chalk/debug, and the controls that stop the next npm package attack.
7 min read
How AI Agents Can Automate a Ransomware Attack

How AI Agents Can Automate a Ransomware Attack: What JadePuffer Just Proved

JadePuffer showed an AI agent can run a ransomware attack start to finish. Here's how it happened, and how to stop agentic threats early.
9 min read
Cyber Resilience Act timeline

The Cyber Resilience Act Timeline: Every Deadline From 2024 to 2027

The full Cyber Resilience Act timeline: every CRA deadline from 2024 to 2027, what's already binding, and how to prepare before Sept 11, 2026.
7 min read
QuietPolyfill, an NPM dropper that resurrected

QuietPolyfill: An NPM dropper that resurrected

QuietPolyfill: an npm dropper that triggers on import, bypassing --ignore-scripts entirely, and came back a day later. Take a look!
14 min read
cybersecurity threats

Cybersecurity Threats in 2026: How AI Threats Are Reshaping the Attack

Cybersecurity threats are evolving fast as AI enters the software supply chain. Check data behind rising AI threats & how to reduce exposure
6 min read
AI Attack Surface

The AI Attack Surface Nobody Is Taking into Account

Your AI attack surface grows with every agent-written line of code. See how slopsquatting & poisoned skills exploit it & how to close the gap
8 min read
Load More