Xygeni Blog

Must-Read Posts

JavacDoor, Maven Malware That Runs at Compile Time

JavacDoor: A Maven Artifact That Ran During Compilation, Not Installation

QuietPolyfill, an NPM dropper that resurrected

QuietPolyfill: An NPM dropper that resurrected

rogue by design

Rogue by Design: How a Sandboxed Pre-Release Model Jailbroke Itself and Hacked Hugging Face to Cheat an Exam

PointBlank: PyPI RAT Hides C2 in a JSON-Bin Service

PointBlank: a fully-featured Python RAT that ran its command channel through a free note-hosting service

PhantomSync: npm Crypto Packages Hide Wallet Stealer

PhantomSync: eight crypto-developer npm packages hide a delayed, self-persisting dropper

FauxUV: Fake PyPI uv Packages Open Jupyter to the Web

FauxUV: fake PyPI uv helpers that open an unauthenticated Jupyter server to the internet

What is Software Composition Analysis Tools

Open-Source Security

What is Software Composition Analysis?

August 21, 2024

software supply chain security automation companies - software supply chain security companies

Software Supply Chain

Software Supply Chain Security Automation

August 19, 2024

top aspm tools for 2026

ASPM

Top 7 ASPM Tools to Consider this 2026

August 16, 2024

SCA security - SCA security tools - software composition analysis

Open-Source Security

SCA Security: Comprehensive Guide Software Security

August 14, 2024

ASPM Security - what is ASPM - ASOC Security

ASPM

ASPM Security vs. ASOC Security: What Sets Them Apart

August 13, 2024

ICT Incident Management

CI CD Security

ICT Incident Management: DORA’s Key Pillar

August 8, 2024

Xygeni_ASPM_Remediation_software_supply_chain_security- ASPM_Tool_Application _Security_Posture_Management_tool

ASPM

How Can Application Security Posture Management (ASPM) Enhance Your Software Supply Chain Security?

August 7, 2024

open source malware protection - open source malware scanner

Open-Source Security

Open Source Malware: Everything You Need to Know

August 6, 2024

Open-Source Security

Open Source Malicious Packages: The Xygeni Approach

July 25, 2024

secure-software-development

Open-Source Security

Secure Software Development: 8 Best Practices

July 24, 2024

open-source packages

Attacks Analysis

Protecting Against Open Source Malicious Packages: What Does (Not) Work

July 23, 2024

sca vs sast - sast vs sca - sast and sca

Open-Source Security

SCA vs SAST : Key Differences in Application Security

July 19, 2024