|
Socket Security Analysis Is Now One Click Away on npm
|
Sarah Gooding |
2026-02-19 |
474 |
--
|
|
Socket Joins the OpenJS Foundation
|
Sarah Gooding |
2026-02-19 |
414 |
--
|
|
SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains
|
Socket Research Team |
2026-02-20 |
7,183 |
10
|
|
What’s in your npm stat counter? A love doll store—we hope n...
|
Ax Sharma |
2026-02-23 |
470 |
1
|
|
Four Malicious NuGet Packages Target ASP.NET Developers With JIT Hooking and Credential Exfiltration
|
Kush Pandya |
2026-02-23 |
3,466 |
--
|
|
Cyber Extortion Demands Skyrocket in 2023 While Fewer Compan...
|
Sarah Gooding |
2026-02-24 |
589 |
2
|
|
Mobile, Alabama Hospital Refuses to Pay Settlement in Landma...
|
Sarah Gooding |
2026-02-24 |
706 |
5
|
|
The “Non-Existent Author” Alert: How to Safeguard Against th...
|
Sarah Gooding |
2026-02-24 |
672 |
--
|
|
AI + a16z Podcast: Combatting Modern Supply Chain Attacks wi...
|
Sarah Gooding |
2026-02-24 |
311 |
1
|
|
Knip Hits 500 Releases with v5.62.0, Improving TypeScript Co...
|
Sarah Gooding |
2026-02-24 |
375 |
4
|
|
Risky Biz Podcast: Open Source Risk Is Compounding as AI Agents Write 90% of New Code
|
Sarah Gooding |
2026-02-24 |
222 |
--
|
|
Risky Business Podcast: Why Open Source Software Needs Bette...
|
Sarah Gooding |
2026-02-26 |
396 |
3
|
|
Interview on the Daytona DotFiles Insider Blog
|
Sarah Gooding |
2026-02-26 |
233 |
1
|
|
Static vs. Runtime Reachability: Insights from Latio’s On th...
|
Sarah Gooding |
2026-02-26 |
411 |
2
|
|
GitHub Removes Malicious Pull Requests Targeting Open Source...
|
Sarah Gooding |
2026-02-26 |
512 |
2
|
|
White House to Tackle Cybersecurity Regulation Fragmentation...
|
Sarah Gooding |
2026-02-26 |
916 |
2
|
|
Malicious Go “crypto” Module Steals Passwords and Deploys Rekoobe Backdoor
|
Kirill Boychenko |
2026-02-26 |
2,254 |
3
|
|
npm Introduces minimumReleaseAge and Bulk OIDC Configuration
|
Sarah Gooding |
2026-02-26 |
669 |
--
|
|
StegaBin: 26 Malicious npm Packages Use Pastebin Steganography to Deploy Multi-Stage Credential Stealer
|
Philipp Burckhardt and Peter van der Zee |
2026-02-27 |
4,377 |
2
|
|
Strengthening Crypto Supply Chain Security Is a Necessity, N...
|
Sarah Gooding |
2026-02-28 |
1,223 |
--
|
|
minimatch Patches 3 High-Severity ReDoS Vulnerabilities
|
Sarah Gooding |
2026-02-28 |
729 |
--
|
|
NIST Proposes AI-Enabled NVD Overhaul After Cutting Routine CVE Enrichment
|
Sarah Gooding |
2026-03-01 |
2,087 |
--
|
|
Unauthorized AI Agent Execution Code Published to OpenVSX in Aqua Trivy VS Code Extension
|
Peter van der Zee and Philipp Burckhardt |
2026-03-02 |
3,627 |
--
|
|
CISA Announces Initiative to Fortify Security of Open Source...
|
Sarah Gooding |
2026-03-03 |
635 |
6
|
|
rv Is a New Rust-Powered Ruby Version Manager Inspired by Py...
|
Sarah Gooding |
2026-03-03 |
1,075 |
3
|
|
Chinchilla Squeaks Podcast: Modern Solutions for Securing So...
|
Sarah Gooding |
2026-03-03 |
1,476 |
1
|
|
Malicious Packagist Packages Disguised as Laravel Utilities Deploy Encrypted RAT
|
Kush Pandya |
2026-03-03 |
1,593 |
--
|
|
Meet the Socket Team at RSAC and BSidesSF 2026
|
Sarah Gooding |
2026-03-03 |
415 |
--
|
|
JavaScript Leaders Demand Oracle Release the JavaScript Trad...
|
Sarah Gooding |
2026-03-05 |
764 |
--
|
|
Fake imToken Chrome Extension Steals Seed Phrases via Phishing Redirects
|
Kirill Boychenko |
2026-03-05 |
1,877 |
--
|
|
Socket Named a Supply Chain Innovator in Latio's 2026 Application Security Market Report
|
Sarah Gooding |
2026-03-05 |
461 |
--
|
|
Recent Trends in Malicious Packages Targeting Discord - Sock...
|
Socket Research Team |
2026-03-10 |
734 |
1
|
|
Deno Standard Library Stabilized After 4 Years and 4,000 Com...
|
Sarah Gooding |
2026-03-10 |
620 |
--
|
|
Malicious npm Package Targets Solana Developers and Hijacks ...
|
Socket Research Team |
2026-03-10 |
730 |
--
|
|
5 Malicious Rust Crates Posed as Time Utilities to Exfiltrate .env Files
|
Kirill Boychenko |
2026-03-10 |
1,741 |
--
|
|
OpenClaw Advisory Surge Highlights Gaps Between GHSA and CVE Tracking
|
Sarah Gooding |
2026-03-10 |
1,307 |
--
|
|
Node.js Moves to Annual Major Releases Starting with Node 27
|
Sarah Gooding |
2026-03-11 |
981 |
--
|
|
Browserslist-rs Gets Major Refactor, Cutting Binary Size by ...
|
Sarah Gooding |
2026-03-12 |
672 |
3
|
|
Developer Accuses Tencent of Copyright Violation After Pytho...
|
Sarah Gooding |
2026-03-12 |
1,204 |
3
|
|
6 Malicious Packagist Themes Ship Trojanized jQuery and FUNNULL Redirect Payloads
|
Kush Pandya |
2026-03-12 |
2,517 |
--
|
|
GCVE Launches Decentralized Publishing Ecosystem for Vulnerability Disclosure
|
Sarah Gooding |
2026-03-12 |
1,103 |
--
|
|
TC39 Advances Temporal to Stage 4 Alongside Several ECMAScript Proposals
|
Sarah Gooding |
2026-03-16 |
706 |
--
|
|
GlassWorm Sleeper Extensions Activate on Open VSX, Shift to GitHub-Hosted VSIX Malware
|
Philipp Burckhardt and Peter van der Zee |
2026-03-18 |
3,676 |
--
|
|
ENISA Publishes Technical Advisory on Secure Use of Package Managers
|
Sarah Gooding |
2026-03-19 |
862 |
6
|
|
Socket and Seal Security Collaborate to Fix Critical npm Ove...
|
Sarah Gooding |
2026-03-20 |
660 |
2
|
|
Safari 18.4 Ships 3 New JavaScript Features from the TC39 Pi...
|
Sarah Gooding |
2026-03-20 |
601 |
2
|
|
Gmail For Exfiltration: Malicious npm Packages Target Solana...
|
Kirill Boychenko |
2026-03-20 |
928 |
4
|
|
CanisterWorm: npm Publisher Compromise Deploys Backdoor Across 29+ Packages
|
Socket Research Team |
2026-03-20 |
1,361 |
3
|
|
Trivy Under Attack Again: Widespread GitHub Actions Tag Compromise Exposes CI/CD Secrets
|
Philipp Burckhardt |
2026-03-20 |
3,346 |
250
|
|
Spam-tastic! npm Registry Swamped by Bizarre John Wick Frenz...
|
Bradley Meck Farias |
2026-03-22 |
394 |
5
|
