Home / Companies / Socket / Blog

Socket Blog

785 posts indexed since 2022

Blog URL
Posts YTD
282 ↑ vs 227 last year
Avg Posts/Month
13.1 since 2022
Monthly Post Volume
Monthly post counts
MonthPosts
1-20220
2-20220
3-20222
4-20220
5-20221
6-20221
7-20221
8-20221
9-20221
10-20221
11-20222
12-20222
1-20233
2-20234
3-20236
4-20237
5-20234
6-20232
7-20233
8-20238
9-20230
10-20232
11-20235
12-202314
1-202416
2-202420
3-202410
4-202413
5-202410
6-202413
7-202416
8-202415
9-202419
10-202424
11-202415
12-202414
1-202518
2-202516
3-202519
4-202527
5-202523
6-202520
7-202523
8-202522
9-202518
10-202524
11-202517
12-202521
1-202635
2-202633
3-202643
4-202632
5-202627
6-202627
7-202623
8-202622
9-202615
10-202624
11-20261
Post Details

785 matching posts

Title Author Published Words HN Pts
TON Wallet Security Threat: Malicious npm Package Steals Cry... Socket Research Team 2025-02-24 883 --
devenv Faces Backlash Over AI-Driven Telemetry in Version 1.... Sarah Gooding 2025-02-21 1,140 --
Deno 2.2 Improves Dependency Management and Expands Node.js ... Sarah Gooding 2025-02-20 667 6
TC39 Advances 3 Proposals to Stage 4: RegExp Escaping, Float... Sarah Gooding 2025-02-20 839 7
React Team Updates CRA Migration Guidance After Community Pu... Sarah Gooding 2025-02-19 1,081 6
Ransomware in 2024: Record-Low Payment Rate Signals Changing... Sarah Gooding 2025-02-14 942 --
PyPI Now Supports iOS and Android Wheels for Mobile Python D... Sarah Gooding 2025-02-12 660 8
Create React App Officially Deprecated Amid React 19 Compati... Sarah Gooding 2025-02-11 876 3
Oracle Drags Its Feet in the JavaScript Trademark Dispute - ... Sarah Gooding 2025-02-07 725 1
Linux Foundation Warns Open Source Developers: Compliance wi... Sarah Gooding 2025-02-06 1,001 6
38% of CISOs Fear They’re Not Moving Fast Enough on AI - Soc... Sarah Gooding 2025-02-04 829 2
Go Supply Chain Attack: Malicious Package Exploits Go Module... Kirill Boychenko 2025-02-04 1,167 17
Socket Joins TC54 to Help Shape the Future of SBOMs, Cyclone... Sarah Gooding 2025-01-31 532 2
PyPI’s New Archival Feature Closes a Major Security Gap - So... Sarah Gooding 2025-01-30 743 3
New PyPI Malware ‘set-utils’ Exfiltrates Ethereum Private Ke... Socket Research Team 2025-01-29 611 4
North Korean APT Lazarus Targets Developers with Malicious n... Socket Research Team 2025-01-29 1,066 7
CISA Brings KEV Data to GitHub Sarah Gooding 2025-01-29 633 --
Monkey-Patched PyPI Packages Use Transitive Dependencies to ... Kirill Boychenko 2025-01-26 1,056 --
cURL Project and Go Security Teams Reject CVSS as Broken - S... Sarah Gooding 2025-01-24 1,046 40
Opengrep Emerges as Open Source Alternative Amid Semgrep Lic... Sarah Gooding 2025-01-23 1,225 4
Node.js EOL Versions CVE Dubbed the "Worst CVE of the Year" ... Sarah Gooding 2025-01-22 1,081 3
Bun 1.2 Released with Improved Node.js Compatibility and Bui... Sarah Gooding 2025-01-22 772 4
Outgoing Biden Administration Issues Sweeping Executive Orde... Sarah Gooding 2025-01-16 852 2
Kill Switch Hidden in npm Packages Typosquatting Chalk and C... Kush Pandya 2025-01-13 1,043 2
pnpm 10.0.0 Blocks Lifecycle Scripts by Default Sarah Gooding 2025-01-10 802 2
Socket Now Supports uv.lock Files Trevor Norris 2025-01-09 903 2
The Risks of Misguided Research in Supply Chain Security - S... Sarah Gooding 2025-01-08 1,059 --
New Python Packaging Proposal Aims to Solve Phantom Dependen... Sarah Gooding 2025-01-07 704 2
Weaponizing OAST: How Malicious Packages Exploit npm, PyPI, ... Kirill Boychenko 2025-01-03 980 3
Malicious npm Campaign Targets Ethereum Developers with Fake... Socket Research Team 2025-01-02 773 3
Supply Chain Attack on Rspack npm Packages Injects Cryptojac... Socket Research Team 2024-12-19 777 4
Quasar RAT Disguised as an npm Package for Detecting Vulnera... Kirill Boychenko 2024-12-18 814 4
Sonar to Acquire Tidelift, Scaling Open Source Maintainer Su... Sarah Gooding 2024-12-18 750 5
Creating an Effective Vulnerability Management Program for O... Martin Torp 2024-12-17 1,144 --
Inside the Business of Ransomware: Insights from Reddit AMA ... Sarah Gooding 2024-12-17 1,215 4
Why Vulnerability Scanning Isn't Enough To Protect Your App ... Feross Aboukhadijeh 2024-12-17 821 --
PyPI on Ultralytics Supply Chain Attack: Poor CI/CD Practice... Sarah Gooding 2024-12-13 825 4
Malicious npm Package Typosquats Popular TypeScript ESLint P... Socket Research Team 2024-12-11 998 3
Data Theft Repackaged: A Case Study in Malicious Wrapper Pac... Kush Pandya 2024-12-11 924 2
Ultralytics PyPI Package Compromised Through GitHub Actions ... Sarah Gooding 2024-12-10 1,236 --
Node.js Delivers First LTS with require(esm) Enabled, Enhanc... Sarah Gooding 2024-12-06 584 --
npm Updates Search Experience with New Objective Sorting Opt... Sarah Gooding 2024-12-05 709 2
require(esm) Backported to Node.js 20, Paving the Way for ES... Sarah Gooding 2024-12-05 661 --
Supply Chain Attack Detected in Solana's web3.js Library - S... Sarah Gooding 2024-12-02 711 17
Typosquatting Cryptographic Libraries: Malicious npm Package... Kirill Boychenko 2024-11-27 962 2
Weekly Downloads Now Available in npm Package Search Results... Sarah Gooding 2024-11-26 404 --
Input Validation Vulnerabilities Dominate MITRE's 2024 CWE T... Sarah Gooding 2024-11-22 768 2
Malicious npm Packages Inject SSH Backdoors via Typosquatted... Kirill Boychenko 2024-11-22 1,092 4
NVD Backlog Tops 20,000 CVEs Awaiting Analysis as NIST Prepa... Sarah Gooding 2024-11-19 748 --
Malicious npm Package Exploits WhatsApp Authentication with ... Kush Pandya 2024-11-15 916 3
Plushcap, by Matt Makai. 2021-2026.