Home / Companies / Socket / Blog

Socket Blog

785 posts indexed since 2022

Blog URL
Posts YTD
282 ↑ vs 227 last year
Avg Posts/Month
13.1 since 2022
Monthly Post Volume
Monthly post counts
MonthPosts
1-20220
2-20220
3-20222
4-20220
5-20221
6-20221
7-20221
8-20221
9-20221
10-20221
11-20222
12-20222
1-20233
2-20234
3-20236
4-20237
5-20234
6-20232
7-20233
8-20238
9-20230
10-20232
11-20235
12-202314
1-202416
2-202420
3-202410
4-202413
5-202410
6-202413
7-202416
8-202415
9-202419
10-202424
11-202415
12-202414
1-202518
2-202516
3-202519
4-202527
5-202523
6-202520
7-202523
8-202522
9-202518
10-202524
11-202517
12-202521
1-202635
2-202633
3-202643
4-202632
5-202627
6-202627
7-202623
8-202622
9-202615
10-202624
11-20261
Post Details

785 matching posts

Title Author Published Words HN Pts
Inside the Business of Ransomware: Insights from Reddit AMA ... Sarah Gooding 2024-12-17 1,215 4
Why Vulnerability Scanning Isn't Enough To Protect Your App ... Feross Aboukhadijeh 2024-12-17 821 --
Quasar RAT Disguised as an npm Package for Detecting Vulnera... Kirill Boychenko 2024-12-18 814 4
Sonar to Acquire Tidelift, Scaling Open Source Maintainer Su... Sarah Gooding 2024-12-18 750 5
Supply Chain Attack on Rspack npm Packages Injects Cryptojac... Socket Research Team 2024-12-19 777 4
Malicious npm Campaign Targets Ethereum Developers with Fake... Socket Research Team 2025-01-02 773 3
Weaponizing OAST: How Malicious Packages Exploit npm, PyPI, ... Kirill Boychenko 2025-01-03 980 3
New Python Packaging Proposal Aims to Solve Phantom Dependen... Sarah Gooding 2025-01-07 704 2
The Risks of Misguided Research in Supply Chain Security - S... Sarah Gooding 2025-01-08 1,059 --
Socket Now Supports uv.lock Files Trevor Norris 2025-01-09 903 2
pnpm 10.0.0 Blocks Lifecycle Scripts by Default Sarah Gooding 2025-01-10 802 2
Kill Switch Hidden in npm Packages Typosquatting Chalk and C... Kush Pandya 2025-01-13 1,043 2
Outgoing Biden Administration Issues Sweeping Executive Orde... Sarah Gooding 2025-01-16 852 2
Node.js EOL Versions CVE Dubbed the "Worst CVE of the Year" ... Sarah Gooding 2025-01-22 1,081 3
Bun 1.2 Released with Improved Node.js Compatibility and Bui... Sarah Gooding 2025-01-22 772 4
Opengrep Emerges as Open Source Alternative Amid Semgrep Lic... Sarah Gooding 2025-01-23 1,225 4
cURL Project and Go Security Teams Reject CVSS as Broken - S... Sarah Gooding 2025-01-24 1,046 40
Monkey-Patched PyPI Packages Use Transitive Dependencies to ... Kirill Boychenko 2025-01-26 1,056 --
New PyPI Malware ‘set-utils’ Exfiltrates Ethereum Private Ke... Socket Research Team 2025-01-29 611 4
North Korean APT Lazarus Targets Developers with Malicious n... Socket Research Team 2025-01-29 1,066 7
CISA Brings KEV Data to GitHub Sarah Gooding 2025-01-29 633 --
PyPI’s New Archival Feature Closes a Major Security Gap - So... Sarah Gooding 2025-01-30 743 3
Socket Joins TC54 to Help Shape the Future of SBOMs, Cyclone... Sarah Gooding 2025-01-31 532 2
38% of CISOs Fear They’re Not Moving Fast Enough on AI - Soc... Sarah Gooding 2025-02-04 829 2
Go Supply Chain Attack: Malicious Package Exploits Go Module... Kirill Boychenko 2025-02-04 1,167 17
Linux Foundation Warns Open Source Developers: Compliance wi... Sarah Gooding 2025-02-06 1,001 6
Oracle Drags Its Feet in the JavaScript Trademark Dispute - ... Sarah Gooding 2025-02-07 725 1
Create React App Officially Deprecated Amid React 19 Compati... Sarah Gooding 2025-02-11 876 3
PyPI Now Supports iOS and Android Wheels for Mobile Python D... Sarah Gooding 2025-02-12 660 8
Ransomware in 2024: Record-Low Payment Rate Signals Changing... Sarah Gooding 2025-02-14 942 --
React Team Updates CRA Migration Guidance After Community Pu... Sarah Gooding 2025-02-19 1,081 6
Deno 2.2 Improves Dependency Management and Expands Node.js ... Sarah Gooding 2025-02-20 667 6
TC39 Advances 3 Proposals to Stage 4: RegExp Escaping, Float... Sarah Gooding 2025-02-20 839 7
devenv Faces Backlash Over AI-Driven Telemetry in Version 1.... Sarah Gooding 2025-02-21 1,140 --
Black Basta’s Dependency Confusion Ambitions and Ransomware ... Kirill Boychenko 2025-02-24 1,112 2
TON Wallet Security Threat: Malicious npm Package Steals Cry... Socket Research Team 2025-02-24 883 --
Malicious PyPI Package Exploits Deezer API for Coordinated M... Kirill Boychenko 2025-02-25 1,072 3
vlt Launches "reproduce": A New Tool Challenging the Limits ... Sarah Gooding 2025-02-26 877 --
OpenSSF Launches Open Source Project Security Baseline to St... Sarah Gooding 2025-02-28 999 3
Bybit Hack Puts Crypto Losses at $1.6B, Surpassing All of La... Sarah Gooding 2025-03-03 1,019 4
Typosquatted Go Packages Deliver Malware Loader Targeting Li... Kirill Boychenko 2025-03-04 989 11
Free Software Foundation Goes to Bat for AGPL in Amicus Brie... Sarah Gooding 2025-03-06 775 9
Lazarus Strikes npm Again with New Wave of Malicious Package... Kirill Boychenko 2025-03-10 1,052 --
The Pair Program Podcast: Feross Aboukhadijeh on Preserving ... Sarah Gooding 2025-03-10 481 3
TypeScript is Porting Its Compiler to Go for 10x Faster Buil... Sarah Gooding 2025-03-11 1,083 --
Lazarus Expands Malicious npm Campaign: 11 New Packages Add ... Kirill Boychenko 2025-03-11 1,054 --
GitHub Actions Supply Chain Attack Puts Thousands of Project... Sarah Gooding 2025-03-17 636 3
Oxlint Now in Beta with 500+ Built-in Rules and 2X Faster Ja... Sarah Gooding 2025-03-18 735 4
Node.js TSC Votes to Stop Distributing Corepack Sarah Gooding 2025-03-19 772 2
Socket Now Available on Google Cloud Marketplace Sarah Gooding 2025-03-21 374 --
Plushcap, by Matt Makai. 2021-2026.