|
Ruby Central Faces Backlash After Publishing Incident Timeline on RubyGems Access Dispute
|
Sarah Gooding |
2025-10-14 |
2,204 |
2
|
|
Vite+ Joins the Push to Consolidate JavaScript Tooling
|
Sarah Gooding |
2025-10-15 |
551 |
1
|
|
ENISA’s 2025 Threat Landscape: AI Reshapes Cyber Attacks, from Phishing to Supply Chain Abuse
|
Sarah Gooding |
2025-10-16 |
680 |
--
|
|
131 Spamware Extensions Targeting WhatsApp Flood Chrome Web Store
|
Kirill Boychenko |
2025-10-18 |
2,418 |
--
|
|
Announcing Experimental Malware Scanning for the Hugging Face Ecosystem
|
Wenxin Jiang |
2025-10-20 |
1,597 |
2
|
|
Unify Your Security Stack with Socket Basics
|
Douglas Coburn and Eli Insua |
2025-10-21 |
1,150 |
1
|
|
Malicious NuGet Packages Typosquat Nethereum to Exfiltrate Wallet Keys
|
Kirill Boychenko |
2025-10-22 |
1,487 |
--
|
|
Introducing Webhook Events for Pull Request Scans
|
Jeppe Hasseriis |
2025-10-22 |
539 |
--
|
|
Introducing GitHub Actions Scanning Support
|
Rakesh Chatrath and Greg Tystahl |
2025-10-23 |
806 |
2
|
|
Introducing Socket Firewall Enterprise: Flexible, Configurable Protection for Modern Package Ecosystems
|
Bradley Meck Farias and Dale Bustad |
2025-10-24 |
770 |
3
|
|
New CNAPulse Dashboard Tracks CNA Activity and Disclosure Trends
|
Sarah Gooding |
2025-10-24 |
580 |
2
|
|
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
|
Kush Pandya |
2025-10-28 |
2,559 |
3
|
|
Ruby Core Team Assumes Stewardship of RubyGems and Bundler, Former Maintainers Offer to Transfer All Rights to Matz
|
Sarah Gooding |
2025-10-29 |
1,352 |
3
|
|
Security Community Slams MIT-linked Report Claiming AI Powers 80% of Ransomware
|
Sarah Gooding |
2025-10-30 |
1,140 |
5
|
|
The Changelog Podcast: Practical Steps to Stay Safe on npm
|
Sarah Gooding |
2025-10-31 |
429 |
2
|
|
How Enterprise Security Is Adapting to AI-Accelerated Threats
|
Sarah Gooding |
2025-11-04 |
267 |
2
|
|
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
|
Kush Pandya |
2025-11-06 |
2,255 |
3
|
|
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
|
Sarah Gooding |
2025-11-08 |
896 |
--
|
|
Meet Socket at Black Hat Europe and BSides London 2025
|
Anders Søndergaard |
2025-11-11 |
338 |
3
|
|
Malicious Chrome Extension Exfiltrates Seed Phrases, Enabling Wallet Takeover
|
Kirill Boychenko |
2025-11-12 |
1,371 |
2
|
|
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
|
Philipp Burckhardt |
2025-11-14 |
929 |
1
|
|
PyPI Expands Trusted Publishing to GitLab Self-Managed as Adoption Passes 25 Percent
|
Sarah Gooding |
2025-11-14 |
644 |
--
|
|
Reachability for Ruby Now in Beta
|
Oskar Haarklou Veileborg |
2025-11-17 |
572 |
--
|
|
npm Malware Campaign Uses Adspect Cloaking to Deliver Malicious Redirects
|
Olivia Brown |
2025-11-17 |
3,290 |
--
|
|
Announcing Socket Certified Patches: One-Click Fixes for Vulnerable Dependencies
|
Mikola Lysenko, Jordan Harband and Jonah Ghebremichael |
2025-11-18 |
1,420 |
2
|
|
Announcing Bun and vlt Support in Socket
|
Ricky Reusser and Eli Insua |
2025-11-19 |
687 |
--
|
|
Introducing Socket Scanning for OpenVSX Extensions
|
Mix Irving and Ryan Eberhardt |
2025-11-20 |
954 |
--
|
|
Introducing Webhook Events for Alert Changes
|
Phil Gates-Idem |
2025-11-21 |
728 |
2
|
|
ENISA Becomes a CVE Root, Expanding Its Role in Europe’s Vulnerability Ecosystem
|
Sarah Gooding |
2025-11-21 |
566 |
--
|
|
Shai Hulud Strikes Again (v2)
|
Socket Research Team |
2025-11-24 |
3,910 |
3
|
|
Malicious Chrome Extension Injects Hidden SOL Fees Into Solana Swaps
|
Kush Pandya |
2025-11-25 |
1,517 |
--
|
|
Inside the GitHub Infrastructure Powering North Korea’s Contagious Interview npm Attacks
|
Kirill Boychenko |
2025-11-26 |
5,010 |
10
|
|
Malicious Rust Crate evm-units Serves Cross-Platform Payloads for Silent Execution
|
Olivia Brown |
2025-12-02 |
1,645 |
--
|
|
Scaling Socket from Zero to 10,000+ Organizations
|
Sarah Gooding |
2025-12-02 |
185 |
2
|
|
TypeScript 6.0 Will Be the Last JavaScript-Based Major Release
|
Sarah Gooding |
2025-12-03 |
853 |
--
|
|
npm Sees Surge of Auto-Generated “elf-stats” Packages Published Every Two Minutes
|
Olivia Brown |
2025-12-03 |
7,848 |
--
|
|
Critical Security Vulnerability in React Server Components
|
Sarah Gooding |
2025-12-03 |
395 |
4
|
|
November CVEs Fell 25% YoY, Driven by Slowdowns at Major CNAs
|
Sarah Gooding |
2025-12-04 |
596 |
2
|
|
Malicious Crate Mimicking ‘Finch’ Exfiltrates Credentials via a Hidden Dependency
|
Kush Pandya |
2025-12-05 |
1,650 |
2
|
|
Malicious Go Packages Impersonate Google’s UUID Library and Exfiltrate Data
|
Kirill Boychenko |
2025-12-05 |
2,004 |
7
|
|
Pretty Themes, Hidden Loaders: GlassWorm-Linked Extensions Span VS Code Marketplace and Open VSX
|
Kirill Boychenko |
2025-12-06 |
3,320 |
--
|
|
Rust RFC Proposes a Security Tab on crates.io for RustSec Advisories
|
Sarah Gooding |
2025-12-09 |
1,073 |
2
|
|
npm Revokes Classic Tokens, as OpenJS Warns Maintainers About OIDC Gaps
|
Sarah Gooding |
2025-12-10 |
1,318 |
3
|
|
Software Engineering Daily Podcast: Feross on AI, Open Source, and Supply Chain Risk
|
Sarah Gooding |
2025-12-11 |
10,160 |
1
|
|
New React Server Components Vulnerabilities: DoS and Source Code Exposure
|
Sarah Gooding |
2025-12-12 |
388 |
--
|
|
Deno 2.6 + Socket: Supply Chain Defense In Your CLI
|
Sarah Gooding |
2025-12-12 |
520 |
3
|
|
Malicious NuGet Package Typosquats Popular .NET Tracing Library to Steal Wallet Passwords
|
Kirill Boychenko |
2025-12-15 |
1,996 |
3
|
|
The Nightmare Before Deployment
|
Ahmad Nassri |
2025-12-16 |
603 |
2
|
|
Socket Firewall Now Available in Docker Hardened Images
|
Sarah Gooding |
2025-12-17 |
504 |
--
|
|
Malicious Chrome Extensions “Phantom Shuttle” Masquerade as a VPN to Intercept Traffic and Exfiltrate Credentials
|
Kush Pandya |
2025-12-22 |
2,864 |
1
|
