Home / Companies / Socket / Blog

Socket Blog

785 posts indexed since 2022

Blog URL
Posts YTD
282 ↑ vs 227 last year
Avg Posts/Month
13.1 since 2022
Monthly Post Volume
Monthly post counts
MonthPosts
1-20220
2-20220
3-20222
4-20220
5-20221
6-20221
7-20221
8-20221
9-20221
10-20221
11-20222
12-20222
1-20233
2-20234
3-20236
4-20237
5-20234
6-20232
7-20233
8-20238
9-20230
10-20232
11-20235
12-202314
1-202416
2-202420
3-202410
4-202413
5-202410
6-202413
7-202416
8-202415
9-202419
10-202424
11-202415
12-202414
1-202518
2-202516
3-202519
4-202527
5-202523
6-202520
7-202523
8-202522
9-202518
10-202524
11-202517
12-202521
1-202635
2-202633
3-202643
4-202632
5-202627
6-202627
7-202623
8-202622
9-202615
10-202624
11-20261
Post Details

785 matching posts

Title Author Published Words HN Pts
Malicious Ruby Gems Exfiltrate Telegram Tokens and Messages ... Kirill Boychenko 2025-05-21 1,025 3
60 Malicious npm Packages Leak Network and Host Data in Acti... Kirill Boychenko 2025-05-23 885 3
TypeScript Native Previews: 10x Faster Compiler Now on npm f... Sarah Gooding 2025-05-23 592 --
Two Malicious Rust Crates Impersonate Popular Logger to Stea... Kirill Boychenko 2025-05-25 976 --
Secure Your AI-Generated Code with Socket MCP Alexandros Kapravelos 2025-05-28 1,254 --
OpenJS Foundation Is Now a CNA for 40+ JavaScript Projects U... Sarah Gooding 2025-05-28 655 --
Vite Releases Technical Preview of Rolldown-Vite, a Rust-Bas... Sarah Gooding 2025-05-30 811 --
Malicious npm Package Wipes Codebases with Remote Trigger - ... Kush Pandya 2025-05-30 972 3
Malicious npm Packages Target BSC and Ethereum to Drain Cryp... Olivia Brown 2025-06-02 963 --
TC39 Advances Array.fromAsync, Error.isError, and Explicit R... Sarah Gooding 2025-06-02 438 --
Socket Now Supports pylock.toml Files Trevor Norris 2025-06-05 989 --
Destructive npm Packages Disguised as Utilities Enable Remot... Kush Pandya 2025-06-05 1,098 --
PyPI Package Disguised as Instagram Growth Tool Harvests Use... Kush Pandya 2025-06-06 1,102 --
Node.js Moves Toward Stable TypeScript Support with Amaro 1.... Sarah Gooding 2025-06-10 535 4
pnpm 10.12 Introduces Global Virtual Store and Expanded Vers... Sarah Gooding 2025-06-11 583 3
2025 Blockchain and Cryptocurrency Threat Report: Malware in... Kirill Boychenko 2025-06-12 1,087 2
The Growing Risk of Malicious Browser Extensions Kush Pandya 2025-06-13 1,110 6
Protestware in JavaScript UI Toolkits on npm Target Russian ... Olivia Brown 2025-06-17 1,009 4
libxml2 Maintainer Ends Embargoed Vulnerability Reports, Cit... Sarah Gooding 2025-06-17 1,015 27
Survey Finds Over Half of CISOs Manage 10+ Security Areas wi... Sarah Gooding 2025-06-18 756 --
MCP Spec Updated to Add Structured Tool Output and Improved ... Sarah Gooding 2025-06-19 709 --
A Fresh Look for the Socket Dashboard Joe Werle 2025-06-23 579 --
From Infra Engineer to CISO: A Conversation with Amplitude’s... Feross Aboukhadijeh 2025-06-23 1,463 --
Malicious Python Package Typosquats Popular passlib Library,... Kush Pandya 2025-06-24 831 3
ECMAScript 2025 Finalized with Iterator Helpers, Set Methods... Sarah Gooding 2025-06-25 560 4
Another Wave: North Korean Contagious Interview Campaign Dro... Kirill Boychenko 2025-06-25 1,123 2
Node.js Homepage Adds Paid Support Link, Prompting Contributor Pushback Sarah Gooding 2025-06-25 1,325 4
Django Joins curl in Pushing Back on AI Slop Security Report... Sarah Gooding 2025-06-30 787 6
Potemkin Understanding in LLMs: New Study Reveals Flaws in ... Sarah Gooding 2025-07-01 1,186 7
Official Go SDK for MCP in Development, Stable Release Expec... Sarah Gooding 2025-07-02 751 --
8 More Malicious Firefox Extensions: Exploiting Popular Game Recognition, Hijacking User Sessions, and Stealing OAuth Credentials Kush Pandya 2025-07-04 1,112 --
New CVE Forecasting Tool Predicts 47,000 Disclosures in 2025... Sarah Gooding 2025-07-07 488 --
Deno 2.4 Brings Back deno bundle, Improves Dependency Manage... Sarah Gooding 2025-07-08 679 --
Open Source CAI Framework Handles Pen Testing Tasks up to 3,... Sarah Gooding 2025-07-09 1,058 --
Meet Socket at Black Hat and DEF CON 2025 in Las Vegas - Soc... Sarah Gooding 2025-07-12 633 3
Contagious Interview Campaign Escalates With 67 Malicious np... Kirill Boychenko 2025-07-14 1,113 10
Tracking Protestware Spread: 28 npm Packages Affected by Pay... Olivia Brown 2025-07-15 787 2
Crates.io Implements Trusted Publishing Support Sarah Gooding 2025-07-16 663 3
Open Source Maintainers Feeling the Weight of the EU’s Cyber... Sarah Gooding 2025-07-17 1,121 1
npm Phishing Email Targets Developers with Typosquatted Doma... Sarah Gooding 2025-07-18 652 3
Active Supply Chain Attack: npm Phishing Campaign Leads to P... Sarah Gooding 2025-07-19 566 45
Toptal’s GitHub Organization Hijacked: 10 Malicious Packages... Kush Pandya 2025-07-20 1,022 3
npm ‘is’ Package Hijacked in Expanding Supply Chain Attack -... Socket Research Team 2025-07-22 904 14
Bun 1.2.19 Adds Isolated Installs for Better Monorepo Suppor... Sarah Gooding 2025-07-22 509 5
Critical Vulnerability in Popular npm form-data Package Used... Sarah Gooding 2025-07-22 507 --
Surveillance Malware Hidden in npm and PyPI Packages Targets Developers with Keyloggers, Webcam Capture, and Credential Theft Socket Research Team 2025-07-23 1,134 4
AI + a16z Podcast: Vibe Coding, Security Risks, and the Path... Sarah Gooding 2025-07-25 182 --
Introducing Socket MCP for Claude Desktop Alexandros Kapravelos 2025-07-29 839 2
Announcing Precomputed Reachability Analysis in Socket - Soc... Martin Torp 2025-07-30 870 2
Socket Now Protects the Chrome Extension Ecosystem Joe Werle 2025-07-30 683 2
Plushcap, by Matt Makai. 2021-2026.