Home / Companies / Socket / Blog

Socket Blog

785 posts indexed since 2022

Blog URL
Posts YTD
282 ↑ vs 227 last year
Avg Posts/Month
13.1 since 2022
Monthly Post Volume
Monthly post counts
MonthPosts
1-20220
2-20220
3-20222
4-20220
5-20221
6-20221
7-20221
8-20221
9-20221
10-20221
11-20222
12-20222
1-20233
2-20234
3-20236
4-20237
5-20234
6-20232
7-20233
8-20238
9-20230
10-20232
11-20235
12-202314
1-202416
2-202420
3-202410
4-202413
5-202410
6-202413
7-202416
8-202415
9-202419
10-202424
11-202415
12-202414
1-202518
2-202516
3-202519
4-202527
5-202523
6-202520
7-202523
8-202522
9-202518
10-202524
11-202517
12-202521
1-202635
2-202633
3-202643
4-202632
5-202627
6-202627
7-202623
8-202622
9-202615
10-202624
11-20261
Post Details

785 matching posts

Title Author Published Words HN Pts
Composer 2.11 Adds Dependency Cooldowns Sarah Gooding 2026-11-03 711 --
OpenCode User Hit with Hostile Backlash After Reporting Free AI Loophole Sarah Gooding 2026-10-29 1,454 --
Cursor Removes Malicious Claude Code 2.1.313 Extension From Its Marketplace Socket Research Team 2026-10-27 1,216 --
Malicious Firefox Extensions Impersonate Phantom, Jupiter, and Bitget to Steal Wallet Secrets Kush Pandya 2026-10-27 2,548 --
eMudhra, Brotli, and the Long Tail of a Security Fix Jonathon Klobucar 2026-10-26 1,404 --
Socket Threat Intel Now Shows Which Malware Campaigns Were Blocked or Detected Ola Adekola 2026-10-26 389 --
Cloudflare Introduces a Faster TypeScript Compiler Written in Rust Sarah Gooding 2026-10-23 1,389 --
PHP Patches Critical RCE Vulnerabilities, Organizations Urged to Take Unpatched Sites Offline Sarah Gooding 2026-10-21 1,190 --
LiteLLM PyPI Package and Docker Images Compromised to Steal Cloud and AI Credentials Socket Research Team 2026-10-21 2,314 --
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches Sarah Gooding 2026-10-21 1,376 --
Rust 1.100 Will Add Dependency Cooldowns to Cargo Sarah Gooding 2026-10-20 853 --
vlt 1.5.0 Adds Agent Skills Management Sarah Gooding 2026-10-20 847 --
Deno Goes the Way of the Dinosaur Sarah Gooding 2026-10-16 2,428 --
Anthropic Gives Open Source Maintainers a Fast Track to Mythos Vulnerability Findings Sarah Gooding 2026-10-15 1,216 --
Socket for Origin Now Available Matt Stypa 2026-10-14 496 --
Front Lines Podcast: What Founders Get Wrong When Pitching CISOs Jerod Santo 2026-10-14 334 --
Agent Baseline Publishes Security Reference Architecture for Software Factories Sarah Gooding 2026-10-13 659 --
New Evidence Shows LiteLLM Secret-Stealing Workflows Ran 11 Days Before Supply Chain Attack Karlo Zanki 2026-10-10 2,595 --
New GhostAction Wave Hits Hundreds of Repos, Expanding Beyond CI/CD Secrets to Cloud Credentials Socket Research Team 2026-10-09 2,327 --
arXiv Is Rate Limiting Authors Following a Flood of AI Slop Submissions Sarah Gooding 2026-10-09 1,299 --
TensorLake npm SDK Compromised in ChainDrop Shai-Hulud Credential-Stealing Attack Socket Research Team 2026-10-08 992 --
16 Malicious Firefox Extensions Steal Cryptocurrency Wallet Credentials Joseph Edwards 2026-10-07 2,226 --
Introducing Socket Scanning for VS Code Marketplace Extensions John Tuckner 2026-10-06 943 --
Securing the Financial Frontier: How Capital One Uses Socket for Open Source Security Sarah Gooding 2026-10-01 531 --
Insecure Agents Podcast: How to Keep AI Agents From Bypassing Security Controls Sarah Gooding 2026-10-01 349 --
New AISI Report Details How GPT-6 Astra Turned CTF Challenges Into Supply Chain Attacks Sarah Gooding 2026-09-30 1,208 --
upm Launches as a Fast, Tiny Package Manager Written in TypeScript Sarah Gooding 2026-09-29 1,007 --
Socket Joins New OpenJS Program to Fund Node.js Security Work Sarah Gooding 2026-09-25 556 --
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud Karlo Zanki 2026-09-25 1,901 --
MemTensor npm and PyPI Packages Compromised in Credential-Stealing Supply Chain Attack Karlo Zanki 2026-09-23 1,853 --
Lovable’s OJ Rewrites Vite’s Dev Server in Rust as AI Lowers the Cost of Forking Open Source Sarah Gooding 2026-09-22 1,185 --
PolinRider Spreads Through Compromised GitHub Accounts and Packagist Karlo Zanki 2026-09-17 1,349 --
GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk Sarah Gooding 2026-09-16 639 --
Jerod Santo Joins Socket as Head of Media Jerod Santo 2026-09-14 374 --
Malicious Firefox Extension Poses as PDF Identity Verifier to Hijack Google Accounts Karlo Zanki 2026-09-11 2,391 --
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack Sarah Gooding 2026-09-10 2,289 --
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data Kirill Boychenko 2026-09-09 1,617 --
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing Sarah Gooding 2026-09-04 1,884 --
Microsoft Teams Notifications Are Now Available in Socket Jeppe Hasseriis 2026-09-01 694 --
pnpm 12’s Rust Rewrite Cuts Install Times by Up to 90% Sarah Gooding 2026-09-01 1,446 --
13 Malicious Packagist Themes Deliver iOS Spyware That Steals Crypto Wallet Seeds Kush Pandya 2026-08-31 3,179 --
6 AppSec CTOs Debate Open Source Supply Chain Security at Black Hat Sarah Gooding 2026-08-31 375 --
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack Socket Research Team 2026-08-28 4,261 --
When Autonomous Agents Escape: Why Socket Signed the Cyber Defense Open Letter Sarah Gooding 2026-08-28 1,135 --
19 Chrome and Edge Extensions Deliver a Wallet Drainer and Credential-Stealing Payloads Karlo Zanki 2026-08-27 3,007 --
Happy Birthday, Shai-Hulud Sarah Gooding 2026-08-26 964 --
Socket for ClickUp Is Now Available Jeppe Hasseriis 2026-08-26 652 --
Socket for Asana Is Now Available Jeppe Hasseriis 2026-08-25 637 --
Open VSX Unblocks Extension IDs Used in Malware Campaign Sarah Gooding 2026-08-24 1,220 --
PHP and Composer Support Is Now in Beta Trevor Norris 2026-08-21 723 --
Plushcap, by Matt Makai. 2021-2026.