Xygeni

Secure your Software Development and Delivery.
#Cybersecurity #ASPM #OSS #DevSecOps #AppSec

[Xygeni @xygeni]

🧩 Xygeni detected New npm malware campaign “JulesJacker” impersonates Google’s Jules AI agent to steal repos, abuse CI/CD environments, and target analysis sandboxes.
Full analysis 👇
https://t.co/uzuSopuZcg

#AppSec #npm #AISecurity #SoftwareSupplyChain #Xygeni

[Xygeni @xygeni]

AI is already inside the SDLC, and AppSec is changing fast.
▶️ Watch the session & read the summary:
https://t.co/8W7etaIFlU

Next stop: OWASP Global AppSec EU Vienna 🇦🇹
📍 Booth G-08 | June 22–26

#OWASP #AppSec #AISecurity #DevSecOps #AgenticAI #Xygeni

[Xygeni @xygeni]

OWASP Global AppSec EU Vienna is almost here 🇦🇹
Meet the Xygeni team (and Agustín Sánchez Fonseca 👋) at Booth G-08
📅 June 22–26
📌 Austria Center Vienna

See you in Vienna!
https://t.co/qZ3l01K4cr

#OWASP #AppSec #AISecurity #DevSecOps #AgenticAI #Xygeni

[Xygeni @xygeni]

Excited to see Xygeni at OWASP Global AppSec EU in Vienna 🇦🇹
AI is changing the SDLC, and the attack surface with it. Come talk Zero Trust for AI-driven development with us.

📍 Booth G-08 | June 22–26

https://t.co/qZ3l01K4cr

#OWASP #AppSec #DevSecOps #AISecurity

[Xygeni @xygeni]

¡Gracias @DevopsdaysMed 2026!
Grandes conversaciones sobre AI-driven SDLC, AppSec y cómo desarrollar con IA sin perder visibilidad ni control.

Échad un ojo al último SafeDev Talk junto a miembros de OWASP: https://t.co/1caQ9FBpDJ

#DevSecOps #AppSec #OWASP #Xygeni

[Xygeni @xygeni]

Thanks to the OWASP members and Xygeni specialists who joined this week’s SafeDev Talk:
“AI Is Already Inside Your SDLC. Now What?”

Watch it here 👇
https://t.co/1caQ9FBpDJ

See you at OWASP Vienna 😊
#AppSec #DevSecOps #AI #OWASP #Xygeni

[Xygeni @xygeni]

¡Ya estamos en @DevopsdaysMed 2026! 🚀

Si vais a estar por Medellín, os esperamos en nuestro stand para hablar de AppSec, DevSecOps y software supply chain security.

🔎 https://t.co/nQasUo0ql3

#DevOpsDaysMedellín #DevOps #DevSecOps #AppSec #CyberSecurity #Xygeni

[Xygeni @xygeni]

🚨 RuntimeBroker: a new npm typosquat deploys a 40-chain crypto clipper disguised as a cross-OS “system runtime helper.”

Full analysis ⬇️
https://t.co/vanj75BygM

#SoftwareSupplyChain #npm #AppSec #CyberSecurity #OSS #Malware #Xygeni

[Xygeni @xygeni]

🚨 24 hours to go: AI Is Already Inside Your SDLC. Now What? Tomorrow, together with OWASP leaders and Xygeni experts, we’ll discuss how organizations can maintain visibility and control across AI-assisted development workflows.

https://t.co/1caQ9FBXth

#AISecurity #OWASP

[Xygeni @xygeni]

🚨 New npm supply chain campaign uncovered: 22 fake Web3 “security” packages hiding credential stealers, MCP-time scanners, and binary droppers.
Only 8 of 22 packages had prior detections.
Full analysis ➡️ https://t.co/TYOeXOHb5v

#npm #AppSec #ThreatResearch #AI #MCP #Xygeni

[Xygeni @xygeni]

💥 Thanks to @_securerecruit for featuring our teammate Dolores Ruzafa Casanova at NCSS 2026 discussing AppSec, AI security, burnout in cyber teams, and human-centric resilience.
🎥 Watch here ➡️ https://t.co/s2lumbmxQB

#CyberSecurity #AppSec #AISecurity #DevSecOps

[Xygeni @xygeni]

🚨 PhantomBot: a new npm typosquat campaign evolved from credential theft into a DDoS botnet recruit almost overnight.

🔸 axois-utils
🔸 chalk-tempalte
Same install hooks. Different payload.

The analysis ➡️ https://t.co/TteBL55yyo

#AppSec #DevSecOps #npm #CyberSecurity

[Xygeni @xygeni]

💥 AI is already inside your SDLC, but can your security team actually see it? Join our Talk with @owasp leaders to explore how AI-generated code, copilots, agents, and Shadow AI are reshaping modern AppSec.

Register now
https://t.co/1caQ9FBpDJ

#AppSec #AISecurity #OWASP

[Xygeni @xygeni]

6 #npm typosquats targeted #EVM/DeFi developers and avoided install-time execution.
No preinstall. No postinstall.
They activated on require(), checked for crypto-dev signals, then tried to steal SSH keys, wallet keystores, .env files, and secrets.
https://t.co/prDnLo27Gv

[Xygeni @xygeni]

6 #npm typosquats targeted #EVMs /#DeFi devs.
No preinstall. No postinstall.
They activated on require() and looked for wallet keys, .env files, SSH keys, and crypto-dev secrets.

https://t.co/mB9Lpqg2mk

#Malware #Web3Security #CyberSecurity

[Xygeni @xygeni]

#ClaudeCode npm clones that worked while quietly proxying developer API traffic.

@xygeni Research found #FauxCode: “reverse-engineered Claude Code” packages using CA bundles, WebSocket relays, and ANTHROPIC_BASE_URL rewrites.

https://t.co/ScVEnv6roz

#AppSec #AISecurity

[Xygeni @xygeni]

🚨 Happening tomorrow
AI is already writing your code. Are you securing it in real time?

🔴 Vibe Coding Secured
📅 May 5 | ⏰ 12:00 CEST
🎥 Live demo
👇 Register
https://t.co/twwAe68oVc

#AppSec #DevSecOps #AICode #CyberSecurity

[Xygeni @xygeni]

Last call 🚨 @ISC2 Spain Chapter, Madrid

📅 May 5th · 🕒 15:30
📍 Calle del Gral. Ramírez de Madrid, 23
Real conversations on what actually works in cybersecurity.

See you there 👇
https://t.co/zGOttlq5mg

#CyberSecurity #AppSec #ISC2 #Madrid

[Xygeni @xygeni]

🚨 ¡Última llamada! 𝐕𝐢𝐛𝐞 𝐂𝐨𝐝𝐢𝐧𝐠 𝐬𝐢𝐧 𝐫𝐢𝐞𝐬𝐠𝐨𝐬: cómo asegurar copilots y agentes de IA desde el IDE

La IA ya escribe tu código. ¿Quién lo está protegiendo?⬇️ Únete en directo ⬇️
https://t.co/JG6bBFajx2

#AppSec #DevSecOps #AIsecurity #CyberSecurity #Xygeni

[Xygeni @xygeni]

AI won’t fix cybersecurity, and that’s the point.
As development evolves, so do the risks. Securing AI-generated code and the software supply chain requires real visibility and control.

See you at @isc2spain ➡️https://t.co/zGOttlpxwI

#AppSec #DevSecOps #AIsecurity #ISC2