Book a demo →
CyberXYZ Security Team

Security Research
& Threat Intel.

Analysis of supply-chain attacks, platform breaches, and emerging threats from the CyberXYZ detection engine.

Research Positioning

Built for the AI Supply Chain: First to Block Go, and Secure the Models AI Runs On

AI is built on PyPI and npm, served on Go, and shipped as models on Hugging Face. CyberXYZ watches all of them, reads the source commit by commit, and blocks at install. The story of that work, told through real blocks: a Go backdoor, a poisoned npm release, and the malicious-model class we were built for.

CyberXYZ Security Team Threat Intelligence
7 min read

All Posts

Research

Built for the AI Supply Chain: First to Block Go, and Secure AI Models

AI runs on PyPI, npm, Go, and model hubs. We watch all of them, read the source, and block at install.

CyberXYZ Security Team 7 min
Critical

binding.gyp: The npm Vector That Skips Postinstall

@immobiliarelabs Backstage plugins trojanized via a node-gyp command expansion. How the evasion works, the IOCs, and how to detect it.

CyberXYZ Security Team 8 min
Critical

Hades Campaign: PyPI Worm Hits AI and Bioinformatics Devs

A .pth startup hook runs a Bun-based credential stealer across 37 PyPI projects. Attack chain, verified IOCs, and hour-zero wave detection.

CyberXYZ Security Team 11 min
Critical

Mini Shai Hulud Returns: AntV npm Ecosystem Attack

Maintainer token compromise pushed malicious versions into 42 npm packages on May 19. Credential exfiltration, Sigstore forgery, and IOCs.

CyberXYZ Security Team 9 min
Critical

Vercel Security Incident: Context.ai OAuth Compromise

Full analysis of the Vercel breach via Context.ai OAuth compromise, including verified IOCs and remediation steps for affected teams.

CyberXYZ Security Team 8 min
Critical

Axios npm Attack: North Korean RAT via Compromised Maintainer

Malicious axios versions 1.14.1 and 0.30.4 deployed cross-platform RATs. Full IOCs, MITRE ATT&CK mapping, and remediation steps.

CyberXYZ Security Team 12 min
Coming Soon

Supply-Chain Attack Patterns in 2026

A data-driven look at how supply-chain attacks evolved in 2026, covering dependency injection, typosquatting, and maintainer takeover trends.

CyberXYZ Security Team
Coming Soon

How CyberXYZ Detects Zero-Day Package Threats

Under the hood of six detection signals, dependency graph analysis, and behavioral modeling that catches malicious packages before install.

CyberXYZ Security Team
👋

Let's Talk

Want to learn how CyberXYZ protects your supply chain? We'd love to hear from you. Reach out and let's have a conversation.

Get in touch Get Secure