Home / Companies / Socket / Blog

Socket Blog

785 posts indexed since 2022

Blog URL
Posts YTD
282 ↑ vs 227 last year
Avg Posts/Month
13.1 since 2022
Monthly Post Volume
Monthly post counts
MonthPosts
1-20220
2-20220
3-20222
4-20220
5-20221
6-20221
7-20221
8-20221
9-20221
10-20221
11-20222
12-20222
1-20233
2-20234
3-20236
4-20237
5-20234
6-20232
7-20233
8-20238
9-20230
10-20232
11-20235
12-202314
1-202416
2-202420
3-202410
4-202413
5-202410
6-202413
7-202416
8-202415
9-202419
10-202424
11-202415
12-202414
1-202518
2-202516
3-202519
4-202527
5-202523
6-202520
7-202523
8-202522
9-202518
10-202524
11-202517
12-202521
1-202635
2-202633
3-202643
4-202632
5-202627
6-202627
7-202623
8-202622
9-202615
10-202624
11-20261
Post Details

785 matching posts

Title Author Published Words HN Pts
Spearphishing Campaign Abuses npm Registry to Target U.S. and Allied Manufacturing and Healthcare Organizations Nicholas Anderson and Kirill Boychenko 2025-12-23 2,631 --
2025 Report: Destructive Malware in Open Source Packages Kush Pandya 2025-12-24 1,393 --
Engineering with AI Podcast: The Promise of AI-First Development Sarah Gooding 2025-12-24 12,951 --
GitHub Actions Pricing Whiplash: Self-Hosted Actions Billing Change Postponed Sarah Gooding 2026-01-05 1,672 --
npm to Implement Staged Publishing After Turbulent Shift Off Classic Tokens Sarah Gooding 2026-01-07 1,310 205
Malicious Twitch Browser Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot Service Kush Pandya 2026-01-08 1,744 --
Insecure Agents Podcast: Certified Patches, Supply Chain Security, and AI Agents Sarah Gooding 2026-01-08 339 --
Tailwind CSS Announces 75% Layoffs as LLMs Reshape OSS Business Models Sarah Gooding 2026-01-08 1,595 3
CVE Volume Surges Past 48,000 in 2025 as WordPress Plugin Ecosystem Drives Growth Sarah Gooding 2026-01-09 785 --
Malicious Chrome Extension Steals MEXC API Keys for Account Takeover Kirill Boychenko 2026-01-12 2,448 7
Node.js Fixes AsyncLocalStorage Crash Bug That Could Take Down Production Servers Sarah Gooding 2026-01-14 1,050 --
5 Malicious Chrome Extensions Enable Session Hijacking in Enterprise HR and ERP Systems Kush Pandya 2026-01-15 3,972 --
Temporal API Ships in Chrome 144, Marking a Major Shift for JavaScript Date Handling Sarah Gooding 2026-01-16 640 3
Rust Support in Socket Is Now Generally Available Trevor Norris 2026-01-19 562 --
Introducing Custom Tabs for Org Alerts André Staltz 2026-01-20 436 --
Node.js 25.4.0 Ships with Stable require(esm) Sarah Gooding 2026-01-21 591 --
PyPI Package Impersonates SymPy to Deliver Cryptomining Malware Kirill Boychenko 2026-01-21 1,669 --
Introducing Supply Chain Attack Campaigns Tracking in the Socket Dashboard Philipp Burckhardt 2026-01-21 759 --
Introducing the Alert Details Page: A Better Way to Explore Alerts André Staltz 2026-01-22 512 --
Introducing Custom Pull Request Alert Comment Headers - Sock... André Staltz 2026-01-23 496 --
socket.yml v2 now available Joe Werle 2026-01-23 415 --
Introducing Dependency Visualization: An Interactive Way to ... Eli Insua 2026-01-23 413 1
A New Design for GitHub PR Comments André Staltz 2026-01-23 638 2
Introducing Organization Dashboards Bret Comnes 2026-01-23 568 --
Pull Request Alerts in Slack Bret Comnes 2026-01-23 82 --
Customize your GitHub Issue Alerts Bret Comnes 2026-01-23 531 --
Socket VSCode Extension Bradley Meck Farias 2026-01-23 468 --
Introducing Scala and Kotlin Support in Socket Joe Werle 2026-01-23 680 --
5 New Critical Issue Alerts Bret Comnes 2026-01-23 677 --
curl Shuts Down Bug Bounty Program After Flood of AI Slop Reports Sarah Gooding 2026-01-23 1,027 --
Introducing Immutable Scans Nolan Lawson 2026-01-23 804 --
Malicious Chrome Extension Performs Hidden Affiliate Hijacking Kush Pandya 2026-01-27 1,426 --
crates.io Ships Security Tab and Tightens Publishing Controls Sarah Gooding 2026-01-27 812 --
Federal Government Rescinds Software Supply Chain Mandates, Makes SBOMs Optional Sarah Gooding 2026-01-28 541 --
n8n Tops 2025 JavaScript Rising Stars as Workflow Platforms Gain Momentum Sarah Gooding 2026-01-29 789 --
72 Malicious Open VSX Extensions Linked to GlassWorm Campaign Now Using Transitive Dependencies Socket Research Team 2026-01-31 1,820 --
Inside Lodash’s Security Reset and Maintenance Reboot Sarah Gooding 2026-01-31 1,528 5
GlassWorm Loader Hits Open VSX via Developer Account Compromise Kirill Boychenko 2026-01-31 2,317 3
Open VSX Begins Implementing Pre-Publish Security Checks After Repeated Supply Chain Incidents Sarah Gooding 2026-02-02 811 --
gem.coop Tests Dependency Cooldowns as Package Ecosystems Move to Slow Down Attacks Sarah Gooding 2026-02-05 444 --
The Next Open Source Security Race: Triage at Machine Speed Sarah Gooding 2026-02-06 1,361 --
Malicious dYdX Packages Published to npm and PyPI After Maintainer Compromise Kush Pandya 2026-02-06 2,458 --
OpenClaw Skill Marketplace Emerges as Active Malware Vector Sarah Gooding 2026-02-09 1,205 --
High-Severity RCE Vulnerability Disclosed in next-mdx-remote Sarah Gooding 2026-02-12 630 --
AI Agent Submits PR to Matplotlib, Publishes Angry Blog Post After Rejection Sarah Gooding 2026-02-12 1,959 --
Malicious Chrome Extension Steals Meta Business Manager Exports and TOTP 2FA Seeds Kirill Boychenko 2026-02-13 2,621 --
AI Agent Lands PRs in Major OSS Projects, Targets Maintainers via Cold Outreach Sarah Gooding 2026-02-14 1,922 16
Introducing PHP and Composer Support in Socket Trevor Norris 2026-02-17 980 --
Socket Brings Supply Chain Security to skills.sh Wenxin Jiang and Alexandros Kapravelos 2026-02-17 701 2
Cline CLI npm Package Compromised via Suspected Cache Poisoning Attack Sarah Gooding 2026-02-18 1,079 --
Plushcap, by Matt Makai. 2021-2026.