Home / Companies / Socket / Blog

Socket Blog

785 posts indexed since 2022

Blog URL
Posts YTD
282 ↑ vs 227 last year
Avg Posts/Month
13.1 since 2022
Monthly Post Volume
Monthly post counts
MonthPosts
1-20220
2-20220
3-20222
4-20220
5-20221
6-20221
7-20221
8-20221
9-20221
10-20221
11-20222
12-20222
1-20233
2-20234
3-20236
4-20237
5-20234
6-20232
7-20233
8-20238
9-20230
10-20232
11-20235
12-202314
1-202416
2-202420
3-202410
4-202413
5-202410
6-202413
7-202416
8-202415
9-202419
10-202424
11-202415
12-202414
1-202518
2-202516
3-202519
4-202527
5-202523
6-202520
7-202523
8-202522
9-202518
10-202524
11-202517
12-202521
1-202635
2-202633
3-202643
4-202632
5-202627
6-202627
7-202623
8-202622
9-202615
10-202624
11-20261
Post Details

785 matching posts

Title Author Published Words HN Pts
PolinRider: North Korea-Linked Supply Chain Campaign Expands Across Open Source Ecosystems Karlo Zanki 2026-07-01 2,477 --
Node.js Considers Public Workflow for Security Reports Amid AI-Driven Surge Sarah Gooding 2026-07-06 969 --
Coordinated npm and PyPI Campaign Typosquats Popular Secure Payment Apps Joseph Edwards 2026-07-07 1,101 --
npm v12 Ships With Install Scripts Off by Default, Begins Deprecating 2FA-Bypass Tokens Sarah Gooding 2026-07-08 988 2
Malicious Go Module Exposes GitHub Malware Lure Network Spanning 222 Repositories Kirill Boychenko 2026-07-08 3,855 --
pnpm 11.10 Hardens Registry Authentication to Block Token Redirection Sarah Gooding 2026-07-08 514 --
Compromised Injective SDK npm Package Exfiltrates Wallet Keys and Mnemonics Karlo Zanki 2026-07-09 1,102 --
Fake Braintree NuGet Package Skims Credit Cards and Harvests Merchant Credentials Joseph Edwards 2026-07-09 2,793 --
jscrambler npm Package Compromised in Supply Chain Attack Socket Research Team 2026-07-11 1,588 --
11 Malicious NuGet Tools Pose as Game Cheats to Drop a Windows Host-Surveillance Payload Kush Pandya 2026-07-14 4,726 --
Compromised npm Packages in the AsyncAPI Namespace Deliver Miasma Botnet Loader Socket Research Team 2026-07-14 2,318 --
Suno Breached via Shai-Hulud Worm, Leaked Code Exposes AI Music Scraping Sarah Gooding 2026-07-16 491 --
Next.js moves to scheduled security releases Sarah Gooding 2026-07-16 869 --
White House Launches Gold Eagle Initiative to Manage Surge in AI-Discovered Vulnerabilities Sarah Gooding 2026-07-17 936 --
Large-Scale GitHub Actions Abuse Powers a Distributed cPanel and WHM Exploitation Campaign Kirill Boychenko 2026-07-22 2,203 --
New Study Identifies 53 Slopsquatting Targets Across 5 Frontier LLMs Sarah Gooding 2026-07-22 1,200 --
Fake Corepack Site Distributes Infostealer and Proxyware to Developers Kirill Boychenko 2026-07-24 943 --
Socket Releases Free Certified Patches for Nuxt Security Vulnerabilities Wenxin Jiang 2026-07-27 619 --
The AI Industry Is Betting on Open Weights Sarah Gooding 2026-07-27 928 --
Distributed npm Package Cluster Delivers Cross-Platform RAT Targeting Alibaba Developers Karlo Zanki 2026-07-28 2,202 --
Two Joyfill npm Beta Releases Compromised to Deliver DEV#POPPER Remote Access Trojan Socket Research Team 2026-07-28 2,331 --
Claude Breached 3 Companies and Uploaded Malware to PyPI During Anthropic's Security Tests Sarah Gooding 2026-07-31 1,119 --
Socket Is Sponsoring Composer and Packagist Sarah Gooding 2026-07-31 436 --
AWS Security Hub Adds Socket for Supply Chain Security Feross Aboukhadijeh 2026-08-04 583 --
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack Socket Research Team 2026-08-04 2,073 --
UK Cyber Test: AI Agent Attempted to Social Engineer Open Source Maintainer Into Merging Malware Sarah Gooding 2026-08-05 1,395 62
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache Sarah Gooding 2026-08-06 833 --
Free Business Plan Upgrades for Open Source Maintainers Feross Aboukhadijeh 2026-08-07 516 --
737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection Kush Pandya 2026-08-11 5,838 --
White House Authorizes Private Companies to Conduct Offensive Cyber Operations Sarah Gooding 2026-08-13 1,814 --
Socket Now Protects the Microsoft Edge Extension Ecosystem John Tuckner 2026-08-14 1,161 --
How AI Agents Expand the Software Supply Chain Attack Surface Sarah Gooding 2026-08-16 250 --
77 Firefox Extensions Linked to Crypto Wallet and Credential Theft Kirill Boychenko 2026-08-19 5,443 --
Socket Now Protects the Firefox Extension Ecosystem John Tuckner 2026-08-20 986 --
Popular Rust Crates Compromised in Build-Time Supply Chain Attack Socket Research Team 2026-08-20 1,322 9
PHP and Composer Support Is Now in Beta Trevor Norris 2026-08-21 723 --
Open VSX Unblocks Extension IDs Used in Malware Campaign Sarah Gooding 2026-08-24 1,220 --
Socket for Asana Is Now Available Jeppe Hasseriis 2026-08-25 637 --
Happy Birthday, Shai-Hulud Sarah Gooding 2026-08-26 964 --
Socket for ClickUp Is Now Available Jeppe Hasseriis 2026-08-26 652 --
19 Chrome and Edge Extensions Deliver a Wallet Drainer and Credential-Stealing Payloads Karlo Zanki 2026-08-27 3,007 --
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack Socket Research Team 2026-08-28 4,261 --
When Autonomous Agents Escape: Why Socket Signed the Cyber Defense Open Letter Sarah Gooding 2026-08-28 1,135 --
13 Malicious Packagist Themes Deliver iOS Spyware That Steals Crypto Wallet Seeds Kush Pandya 2026-08-31 3,179 --
6 AppSec CTOs Debate Open Source Supply Chain Security at Black Hat Sarah Gooding 2026-08-31 375 --
Microsoft Teams Notifications Are Now Available in Socket Jeppe Hasseriis 2026-09-01 694 --
pnpm 12’s Rust Rewrite Cuts Install Times by Up to 90% Sarah Gooding 2026-09-01 1,446 --
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing Sarah Gooding 2026-09-04 1,884 --
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data Kirill Boychenko 2026-09-09 1,617 --
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack Sarah Gooding 2026-09-10 2,289 --
Plushcap, by Matt Makai. 2021-2026.