Xygeni Blog

Must-Read Posts

JavacDoor, Maven Malware That Runs at Compile Time

JavacDoor: A Maven Artifact That Ran During Compilation, Not Installation

QuietPolyfill, an NPM dropper that resurrected

QuietPolyfill: An NPM dropper that resurrected

rogue by design

Rogue by Design: How a Sandboxed Pre-Release Model Jailbroke Itself and Hacked Hugging Face to Cheat an Exam

PointBlank: PyPI RAT Hides C2 in a JSON-Bin Service

PointBlank: a fully-featured Python RAT that ran its command channel through a free note-hosting service

PhantomSync: npm Crypto Packages Hide Wallet Stealer

PhantomSync: eight crypto-developer npm packages hide a delayed, self-persisting dropper

FauxUV: Fake PyPI uv Packages Open Jupyter to the Web

FauxUV: fake PyPI uv helpers that open an unauthenticated Jupyter server to the internet

LiteLLM Supply Chain Attack

Attacks Analysis

LiteLLM Attack: How Xygeni Stops Secret Exposure Fast

March 27, 2026

LiteLLM Supply Chain Attack

Attacks Analysis

LiteLLM Supply Chain Attack: How TeamPCP Backdoored AI Infrastructure

March 26, 2026

AI

AI Coding Assistant Security: How to Prevent Vulnerabilities in AI-Generated Code

March 25, 2026

AI

How to Implement AI Remediation in DevSecOps

March 13, 2026

Shadow AI Security

AI

Shadow AI Security: All You Need to Know

March 6, 2026

npm Infostealer

Attacks Analysis

New npm Infostealer Discovery: Nyx Stealer Hijacks Discord Sessions

February 27, 2026

Xygeni Launches MCP Server for AI Security in the IDE

AI

Xygeni Launches MCP Server for AI Security in the IDE

February 26, 2026

Malicious npm Package

Attacks Analysis

Malicious npm Package in Baileys Fork (Skyzopedia Case)

February 25, 2026

Code Security

Mobile App Security with Swift and Kotlin SAST

February 20, 2026

allintextlogin filetypelog

Attacks Analysis

allintext:login filetype:log – How Exposed Logs Leak Credentials

February 18, 2026

vibe coding

AI

Vibe Coding Security: Why Traditional AppSec Breaks

February 13, 2026

Why We Built Known-Exploit Intelligence Fix What Attackers Actually Use

Open-Source Security

Known-Exploit Intelligence for Vulnerability Management

February 11, 2026