Xygeni Blog

npm Infostealer

New npm Infostealer Discovery: Nyx Stealer Hijacks Discord Sessions

Xygeni identifies Nyx: a sophisticated npm Infostealer hijacking Discord and crypto wallets using advanced runtime decryption.
7 min read
Xygeni Launches MCP Server for AI Security in the IDE

Xygeni Launches MCP Server for AI Security in the IDE

Discover the mcp server and its role in orchestrating security with AI to transform how developers handle code generation.
3 min read
Malicious npm Package

Malicious npm Package in Baileys Fork (Skyzopedia Case)

Malicious npm package abuses a Baileys fork to inject runtime spam behavior through a GitHub-controlled payload.
5 min read
Mobile App Security

Mobile App Security with Swift and Kotlin SAST

Strengthen mobile app security with native Swift SAST and Kotlin SAST, optimized for OWASP Mobile Top 10 and CI/CD integration.
5 min read
allintextlogin filetypelog

allintext:login filetype:log – How Exposed Logs Leak Credentials

allintext:login filetype:log exposes public log files with credentials and tokens. Learn how to stop log-based data leaks.
6 min read
vibe coding

Vibe Coding Security: Why Traditional AppSec Breaks

Vibe coding security exposes blind spots in traditional AppSec. Learn how to secure AI-driven DevSecOps workflows.
6 min read
Why We Built Known-Exploit Intelligence Fix What Attackers Actually Use

Known-Exploit Intelligence for Vulnerability Management

Discover how Known-Exploit Intelligence can transform your vulnerability management by prioritizing confirmed attack behaviors.
4 min read
DAST Meets ASPM

DAST Meets ASPM: Closing the Gap Between Code and Runtime Exposure

DAST meets ASPM to correlate runtime exposure with code risk, reduce false positives, and prioritize exploitable vulnerabilities.
3 min read
AI-Powered Malware Detection

AI-Powered Malware Detection in SSCS

AI-powered malware detection stops ai malware through behavioral analysis and protects code, dependencies, and CI/CD pipelines.
4 min read
OWASP GenAI Security Project - generative AI security - gen AI security

OWASP GenAI Security Project

Guide for DevOps on the OWASP GenAI Security Project, generative AI security, and gen AI security risks in modern CI/CD pipelines.
6 min read
Shai-Hulud 3.0 - npm Malware Worn - shai-hulud malware

Shai-Hulud 3.0: npm Malware Worm

Shai-Hulud 3.0 is the latest shai-hulud npm malware, a worm that spreads automatically through npm packages.
5 min read
weak application security

How Weak Application Security Creates Digital Privacy Risks

Learn how weak application security exposes data, enabling privacy risks like breaches, impersonation, abuse & how DevSecOps prevent them!
7 min read