|
Internet Archive Hacked, 31 Million Record Compromised
|
Sarah Gooding |
2024-09-28 |
450 |
--
|
|
Cloudflare Adds Security.txt Setup Wizard
|
Sarah Gooding |
2024-09-30 |
517 |
3
|
|
Unveiling Members Hub: A Large-Scale Campaign to Artificiall...
|
Kush Pandya |
2024-10-02 |
755 |
2
|
|
ESLint is Now Language-Agnostic: Linting JSON, Markdown, and...
|
Sarah Gooding |
2024-10-03 |
599 |
4
|
|
White House Cybersecurity Advisor Calls for Ban on Using Ins...
|
Sarah Gooding |
2024-10-08 |
725 |
3
|
|
Nightmares on npm: How Two Malicious Packages Facilitate Dat...
|
Kush Pandya |
2024-10-09 |
751 |
2
|
|
TC39 Advances 10+ ECMAScript Proposals: Key Features to Watc...
|
Sarah Gooding |
2024-10-09 |
1,115 |
2
|
|
Deno 2 Improves Compatibility with Node.js and npm, Expands ...
|
Sarah Gooding |
2024-10-10 |
648 |
--
|
|
Comparing Reachability Analysis Providers
|
Martin Torp |
2024-10-10 |
939 |
--
|
|
Noxia: Emerging Dark Web Hosting Provider Targets Python, No...
|
Kirill Boychenko |
2024-10-10 |
879 |
2
|
|
Typosquatting on PyPI: Malicious Package Mimics Popular 'bro...
|
Kirill Boychenko |
2024-10-11 |
882 |
3
|
|
Introducing Java Support in Socket
|
Eli Insua |
2024-10-15 |
1,082 |
--
|
|
Introducing Socket Optimize
|
John-David Dalton |
2024-10-16 |
711 |
3
|
|
Introducing License Enforcement in Socket
|
Philipp Burckhardt |
2024-10-17 |
837 |
2
|
|
Enhancing Open-Source Compliance: Introducing Socket’s Advan...
|
Christopher Bailey |
2024-10-17 |
1,227 |
--
|
|
Introducing Ruby Support in Socket
|
Joe Werle |
2024-10-21 |
933 |
3
|
|
Socket secures $40M to combat next-generation software suppl...
|
Feross Aboukhadijeh |
2024-10-22 |
733 |
3
|
|
Supply Chain Attacks Targeting LLM Application Developers: T...
|
Socket Research Team |
2024-10-24 |
1,168 |
12
|
|
OSI to Lead Discussions on Navigating the Challenges of Doing Business with Open Source
|
Sarah Gooding |
2024-10-29 |
847 |
3
|
|
Dutch National Police Disrupt Redline and Meta Malware Opera...
|
Sarah Gooding |
2024-10-29 |
486 |
3
|
|
Python Overtakes JavaScript as Top Programming Language on G...
|
Sarah Gooding |
2024-10-30 |
755 |
--
|
|
Socket Recognized for Second Consecutive Year on Fortune Cyber 60 List
|
Sarah Gooding |
2024-10-30 |
430 |
2
|
|
Author Typosquatting on npm: Attackers Impersonate Sindre So...
|
Kirill Boychenko |
2024-10-31 |
979 |
--
|
|
Supply Chain Attack on LottieFiles Player Caused by Compromi...
|
Sarah Gooding |
2024-10-31 |
583 |
--
|
|
Threat Actor Exposes Playbook for Exploiting npm to Build Bl...
|
Kirill Boychenko |
2024-10-31 |
1,165 |
11
|
|
Massive npm Malware Campaign Leverages Ethereum Smart Contra...
|
Socket Research Team |
2024-10-31 |
966 |
3
|
|
JSR Working Group Kicks Off with Ambitious Roadmap and Plans...
|
Sarah Gooding |
2024-11-05 |
912 |
--
|
|
How to Evaluate an SCA with Reachability: Benchmarking Hard-...
|
Martin Torp |
2024-11-05 |
1,190 |
--
|
|
Malicious Python Package Typosquats Popular 'fabric' SSH Lib...
|
Socket Research Team |
2024-11-06 |
953 |
--
|
|
Node.js Implements Stricter Policies for Semver-Major Pull R...
|
Sarah Gooding |
2024-11-08 |
559 |
2
|
|
Roblox Developers Targeted with npm Packages Infected with S...
|
Kirill Boychenko |
2024-11-08 |
1,124 |
--
|
|
Skuld Infostealer Returns to npm with Fake Windows Utilities...
|
Kirill Boychenko |
2024-11-08 |
927 |
--
|
|
vlt Debuts New JavaScript Package Manager and Serverless Reg...
|
Sarah Gooding |
2024-11-08 |
687 |
--
|
|
RubyGems.org Adds New Maintainer Role
|
Sarah Gooding |
2024-11-12 |
538 |
5
|
|
Malicious npm Package Exploits WhatsApp Authentication with ...
|
Kush Pandya |
2024-11-15 |
916 |
3
|
|
PyPI Introduces Digital Attestations to Strengthen Python Pa...
|
Sarah Gooding |
2024-11-15 |
935 |
--
|
|
NVD Backlog Tops 20,000 CVEs Awaiting Analysis as NIST Prepa...
|
Sarah Gooding |
2024-11-19 |
748 |
--
|
|
Input Validation Vulnerabilities Dominate MITRE's 2024 CWE T...
|
Sarah Gooding |
2024-11-22 |
768 |
2
|
|
Malicious npm Packages Inject SSH Backdoors via Typosquatted...
|
Kirill Boychenko |
2024-11-22 |
1,092 |
4
|
|
Weekly Downloads Now Available in npm Package Search Results...
|
Sarah Gooding |
2024-11-26 |
404 |
--
|
|
Typosquatting Cryptographic Libraries: Malicious npm Package...
|
Kirill Boychenko |
2024-11-27 |
962 |
2
|
|
Supply Chain Attack Detected in Solana's web3.js Library - S...
|
Sarah Gooding |
2024-12-02 |
711 |
17
|
|
npm Updates Search Experience with New Objective Sorting Opt...
|
Sarah Gooding |
2024-12-05 |
709 |
2
|
|
require(esm) Backported to Node.js 20, Paving the Way for ES...
|
Sarah Gooding |
2024-12-05 |
661 |
--
|
|
Node.js Delivers First LTS with require(esm) Enabled, Enhanc...
|
Sarah Gooding |
2024-12-06 |
584 |
--
|
|
Ultralytics PyPI Package Compromised Through GitHub Actions ...
|
Sarah Gooding |
2024-12-10 |
1,236 |
--
|
|
Malicious npm Package Typosquats Popular TypeScript ESLint P...
|
Socket Research Team |
2024-12-11 |
998 |
3
|
|
Data Theft Repackaged: A Case Study in Malicious Wrapper Pac...
|
Kush Pandya |
2024-12-11 |
924 |
2
|
|
PyPI on Ultralytics Supply Chain Attack: Poor CI/CD Practice...
|
Sarah Gooding |
2024-12-13 |
825 |
4
|
|
Creating an Effective Vulnerability Management Program for O...
|
Martin Torp |
2024-12-17 |
1,144 |
--
|