Xygeni Blog

Must-Read Posts

Ectoplasm npm Install Hooks That Steal AWS Credentials

Ectoplasm: npm install hooks that harvest AWS credentials behind a container-only trigger

SeedSweep: Ten Malicious npm Crypto Packages

SeedSweep: Ten Crypto-Themed npm Packages That Only Run When No One Is Watching

PairLoop: Hidden Remote-Control Panel in npm Package

PairLoop: One npm Package, Seventy Versions, and a Hidden Windows Remote-Control Panel

ConsentMask The npm Package Hiding Developer Identity Harvesting

ConsentMask: An npm Package That Wears a Telemetry Consent Banner Over Developer-Identity Harvesting

JulesJacker: Fake npm Worm Impersonates Jules AI

JulesJacker: A Fake-PoC npm Worm That Impersonates Google’s Jules Agent — and Turns on the Sandbox Analyzing It

RuntimeBroker npm Typosquat Plants Crypto Clipper

RuntimeBroker: an npm Typosquat Plants a 40-Chain Crypto-Clipper as a Cross-OS \”System Runtime Helper”\

c# httpclient - httpclient c# - c sharp httpclient

Code Security

C# HttpClient: Common Security Pitfalls and Safe Practices

November 14, 2025

c# regex - regex for c# - regex c#

Code Security

C# Regex DoS: When Patterns Become Attack Vectors

November 14, 2025

ilspy - what is decompile in assembly - dotnet decompiler

Code Security

ILSpy and .NET Decompiler Risks: What Your Assemblies Reveal

November 13, 2025

system.text.json - jsonserializer - system text json serialization

Code Security

System.Text.Json Defaults in .NET: When Convenience Opens Data Exposure

November 13, 2025

AI

MCP Security: Protecting the Model Context Protocol

November 12, 2025

Spring Boot security - Java Spring Boot - Spring Boot security best practices

Open-Source Security

Spring Boot Security FAQs

November 12, 2025

.net 8.0

Code Security

.NET 8 Security Updates Every Developer Should Know

November 12, 2025

dependency check - owasp dependency check - dependency mapping tool - application dependency mapping tools

Open-Source Security

Dependency Check Tools in AppSec

November 11, 2025

static analysis vs dynamic analysis - static vs dynamic analysis - Static Testing vs Dynamic Testing - static vs dynamic code analysis

Code Security

Static Analysis vs Dynamic Analysis: Key Differences in AppSec

November 11, 2025

async vs sync - synch vs sync - c# async

Code Security

Async vs Sync in C#: Why It’s More Than Just Performance

November 11, 2025

penetration testing vs vulnerability scanning - vulnerability scanning vs penetration testing - vulnerability scan vs penetration test

Code Security

Penetration Testing vs Vulnerability Scanning: What Developers Need to Know

November 7, 2025

kev - kevs - known exploited vulnerabilities

Code Security

Known Exploited Vulnerabilities: What to Fix First

November 6, 2025