Home / Companies / Socket / Blog

Socket Blog

785 posts indexed since 2022

Blog URL
Posts YTD
282 ↑ vs 227 last year
Avg Posts/Month
13.1 since 2022
Monthly Post Volume
Monthly post counts
MonthPosts
1-20220
2-20220
3-20222
4-20220
5-20221
6-20221
7-20221
8-20221
9-20221
10-20221
11-20222
12-20222
1-20233
2-20234
3-20236
4-20237
5-20234
6-20232
7-20233
8-20238
9-20230
10-20232
11-20235
12-202314
1-202416
2-202420
3-202410
4-202413
5-202410
6-202413
7-202416
8-202415
9-202419
10-202424
11-202415
12-202414
1-202518
2-202516
3-202519
4-202527
5-202523
6-202520
7-202523
8-202522
9-202518
10-202524
11-202517
12-202521
1-202635
2-202633
3-202643
4-202632
5-202627
6-202627
7-202623
8-202622
9-202615
10-202624
11-20261
Post Details

785 matching posts

Title Author Published Words HN Pts
Introducing Rust Support in Socket Trevor Norris 2025-07-31 729 8
Critical Vulnerability in NestJS Devtools: Localhost RCE via... Jonathan Leitschuh 2025-08-01 1,288 --
Introducing License Overlays: Smarter License Management for... Christopher Bailey 2025-08-01 771 --
Malicious npm Packages Target WhatsApp Developers with Remot... Kush Pandya 2025-08-06 1,057 --
TC39 Advances 11 Proposals for Math Precision, Binary APIs, ... Sarah Gooding 2025-08-06 664 3
11 Malicious Go Packages Distribute Obfuscated Remote Payloa... Olivia Brown 2025-08-06 1,094 --
60 Malicious Ruby Gems Used in Targeted Credential Theft Cam... Kirill Boychenko 2025-08-07 969 3
New CNA Scorecard Tool Ranks CVE Data Quality Across the Eco... Sarah Gooding 2025-08-07 1,112 --
Follow-up and Clarification on Recent Malicious Ruby Gems Ca... Sarah Gooding 2025-08-07 381 --
npm Adopts OIDC for Trusted Publishing in CI/CD Workflows - ... Sarah Gooding 2025-08-08 759 --
Opengrep Adds Apex Support and New Rule Controls in Latest Updates Sarah Gooding 2025-08-12 622 5
Astral Launches pyx: A Python-Native Package Registry - Sock... Sarah Gooding 2025-08-13 842 3
New Website “Is It Really FOSS?” Tracks Transparency in Open... Sarah Gooding 2025-08-15 971 8
Oxlint Introduces Type-Aware Linting Preview Sarah Gooding 2025-08-18 682 4
Researcher Exposes Zero-Day Clickjacking Vulnerabilities in ... Jonathan Leitschuh 2025-08-19 1,184 13
Rspack Introduces Rslint, a TypeScript-First Linter Written ... Sarah Gooding 2025-08-20 757 4
Malicious Go Module Disguised as SSH Brute Forcer Exfiltrates Credentials via Telegram Kirill Boychenko 2025-08-21 1,544 3
ESLint Adds Support for Parallel Linting, Closing 10-Year-Ol... Sarah Gooding 2025-08-22 490 --
CISA’s 2025 SBOM Guidance Adds Hashes, Licenses, Tool Metada... Sarah Gooding 2025-08-22 765 --
Nx npm Packages Compromised in Supply Chain Attack Weaponizi... Socket Research Team 2025-08-26 1,129 3
Nx Investigation Reveals GitHub Actions Workflow Exploit Led... Sarah Gooding 2025-08-26 1,183 4
Risky Biz Podcast: Making Reachability Analysis Work in Real... Sarah Gooding 2025-08-28 330 --
Wallet-Draining npm Package Impersonates Nodemailer to Hijac... Kirill Boychenko 2025-08-29 837 3
AGENTS.md Gains Traction as an Open Format for AI Coding Age... Sarah Gooding 2025-09-03 899 --
Malicious npm Packages Impersonate Flashbots SDKs, Targeting... Kush Pandya 2025-09-05 1,069 2
npm Author Qix Compromised via Phishing Email in Major Suppl... Socket Research Team 2025-09-08 432 4
Introducing Pull Request Stories to Help Security Teams Tra... André Staltz 2025-09-08 576 --
Introducing Tier 1 Reachability: Precision CVE Triage for En... Martin Torp 2025-09-09 841 3
MCP Steering Committee Launches Official MCP Registry in Pre... Sarah Gooding 2025-09-09 628 --
DuckDB npm Account Compromised in Continuing Supply Chain At... Socket Research Team 2025-09-09 331 27
Announcing Socket Fix 2.0 Joe Werle 2025-09-10 873 --
Feross on Risky Business Weekly Podcast: npm’s Ongoing Suppl... Sarah Gooding 2025-09-10 300 1
Rust Support Now in Beta Joe Werle 2025-09-11 517 4
Crates.io Users Targeted by Phishing Emails Sarah Gooding 2025-09-12 389 --
pnpm 10.16 Adds New Setting for Delayed Dependency Updates -... Sarah Gooding 2025-09-15 807 --
Popular Tinycolor npm Package Compromised in Supply Chain At... Socket Research Team 2025-09-15 721 85
Updated and Ongoing Supply Chain Attack Targets CrowdStrike ... Sarah Gooding 2025-09-16 884 1,233
Identifying and Preventing Fraudulent Engineering Candidates... Socket Research Team 2025-09-17 1,202 3
Malicious fezbox npm Package Steals Browser Passwords from C... Olivia Brown 2025-09-22 808 --
Package Maintainers Call for Improvements to GitHub’s New np... Sarah Gooding 2025-09-30 1,111 3
Introducing Socket Firewall: Free, Proactive Protection for ... Dale Bustad 2025-09-30 1,322 8
PEP 810 Proposes Explicit Lazy Imports for Python 3.15 - Soc... Sarah Gooding 2025-10-02 811 --
PodRocket Podcast: Inside the Recent npm Supply Chain Attack... Sarah Gooding 2025-10-02 235 6
Gem Cooperative Emerges as a Community-Run Alternative to Ru... Sarah Gooding 2025-10-05 871 30
Python 3.14 Released With Template String Literals, Deferred... Sarah Gooding 2025-10-07 592 6
175 Malicious npm Packages Host Phishing Infrastructure Targeting 135+ Organizations Kush Pandya 2025-10-09 2,193 3
Google’s OSV Fix Just Added 500+ New Advisories — All Thanks to One Small Policy Change Jonathan Leitschuh 2025-10-10 940 2
Socket Integrates With Bun 1.3’s Security Scanner API Ahmad Nassri and Bradley Meck Farias 2025-10-10 691 3
North Korea’s Contagious Interview Campaign Escalates: 338 Malicious npm Packages, 50,000 Downloads Kirill Boychenko 2025-10-10 3,160 3
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org Olivia Brown 2025-10-11 1,952 --
Plushcap, by Matt Makai. 2021-2026.