|
PyPI Introduces Digital Attestations to Strengthen Python Pa...
|
Sarah Gooding |
2024-11-15 |
935 |
--
|
|
RubyGems.org Adds New Maintainer Role
|
Sarah Gooding |
2024-11-12 |
538 |
5
|
|
Node.js Implements Stricter Policies for Semver-Major Pull R...
|
Sarah Gooding |
2024-11-08 |
559 |
2
|
|
Roblox Developers Targeted with npm Packages Infected with S...
|
Kirill Boychenko |
2024-11-08 |
1,124 |
--
|
|
Skuld Infostealer Returns to npm with Fake Windows Utilities...
|
Kirill Boychenko |
2024-11-08 |
927 |
--
|
|
vlt Debuts New JavaScript Package Manager and Serverless Reg...
|
Sarah Gooding |
2024-11-08 |
687 |
--
|
|
Malicious Python Package Typosquats Popular 'fabric' SSH Lib...
|
Socket Research Team |
2024-11-06 |
953 |
--
|
|
JSR Working Group Kicks Off with Ambitious Roadmap and Plans...
|
Sarah Gooding |
2024-11-05 |
912 |
--
|
|
How to Evaluate an SCA with Reachability: Benchmarking Hard-...
|
Martin Torp |
2024-11-05 |
1,190 |
--
|
|
Author Typosquatting on npm: Attackers Impersonate Sindre So...
|
Kirill Boychenko |
2024-10-31 |
979 |
--
|
|
Supply Chain Attack on LottieFiles Player Caused by Compromi...
|
Sarah Gooding |
2024-10-31 |
583 |
--
|
|
Threat Actor Exposes Playbook for Exploiting npm to Build Bl...
|
Kirill Boychenko |
2024-10-31 |
1,165 |
11
|
|
Massive npm Malware Campaign Leverages Ethereum Smart Contra...
|
Socket Research Team |
2024-10-31 |
966 |
3
|
|
Python Overtakes JavaScript as Top Programming Language on G...
|
Sarah Gooding |
2024-10-30 |
755 |
--
|
|
Socket Recognized for Second Consecutive Year on Fortune Cyber 60 List
|
Sarah Gooding |
2024-10-30 |
430 |
2
|
|
OSI to Lead Discussions on Navigating the Challenges of Doing Business with Open Source
|
Sarah Gooding |
2024-10-29 |
847 |
3
|
|
Dutch National Police Disrupt Redline and Meta Malware Opera...
|
Sarah Gooding |
2024-10-29 |
486 |
3
|
|
Supply Chain Attacks Targeting LLM Application Developers: T...
|
Socket Research Team |
2024-10-24 |
1,168 |
12
|
|
Socket secures $40M to combat next-generation software suppl...
|
Feross Aboukhadijeh |
2024-10-22 |
733 |
3
|
|
Introducing Ruby Support in Socket
|
Joe Werle |
2024-10-21 |
933 |
3
|
|
Introducing License Enforcement in Socket
|
Philipp Burckhardt |
2024-10-17 |
837 |
2
|
|
Enhancing Open-Source Compliance: Introducing Socket’s Advan...
|
Christopher Bailey |
2024-10-17 |
1,227 |
--
|
|
Introducing Socket Optimize
|
John-David Dalton |
2024-10-16 |
711 |
3
|
|
Introducing Java Support in Socket
|
Eli Insua |
2024-10-15 |
1,082 |
--
|
|
Typosquatting on PyPI: Malicious Package Mimics Popular 'bro...
|
Kirill Boychenko |
2024-10-11 |
882 |
3
|
|
Deno 2 Improves Compatibility with Node.js and npm, Expands ...
|
Sarah Gooding |
2024-10-10 |
648 |
--
|
|
Comparing Reachability Analysis Providers
|
Martin Torp |
2024-10-10 |
939 |
--
|
|
Noxia: Emerging Dark Web Hosting Provider Targets Python, No...
|
Kirill Boychenko |
2024-10-10 |
879 |
2
|
|
Nightmares on npm: How Two Malicious Packages Facilitate Dat...
|
Kush Pandya |
2024-10-09 |
751 |
2
|
|
TC39 Advances 10+ ECMAScript Proposals: Key Features to Watc...
|
Sarah Gooding |
2024-10-09 |
1,115 |
2
|
|
White House Cybersecurity Advisor Calls for Ban on Using Ins...
|
Sarah Gooding |
2024-10-08 |
725 |
3
|
|
ESLint is Now Language-Agnostic: Linting JSON, Markdown, and...
|
Sarah Gooding |
2024-10-03 |
599 |
4
|
|
Unveiling Members Hub: A Large-Scale Campaign to Artificiall...
|
Kush Pandya |
2024-10-02 |
755 |
2
|
|
Cloudflare Adds Security.txt Setup Wizard
|
Sarah Gooding |
2024-09-30 |
517 |
3
|
|
Internet Archive Hacked, 31 Million Record Compromised
|
Sarah Gooding |
2024-09-28 |
450 |
--
|
|
ENISA 2024 Threat Landscape Report Warns of Increasing State...
|
Sarah Gooding |
2024-09-27 |
1,084 |
3
|
|
Malicious “express-dompurify” npm Package Steals Browser and...
|
Socket Research Team |
2024-09-27 |
1,139 |
3
|
|
NIST’s New Password Guidelines Will Eliminate Periodic Chang...
|
Sarah Gooding |
2024-09-26 |
660 |
11
|
|
Highlights from the 2024 Rails Community Survey
|
Sarah Gooding |
2024-09-25 |
974 |
3
|
|
Combatting Alert Fatigue by Prioritizing Malicious Intent - ...
|
Feross Aboukhadijeh |
2024-09-23 |
1,228 |
3
|
|
NIST Misses 2024 Deadline to Clear NVD Backlog
|
Sarah Gooding |
2024-09-21 |
630 |
4
|
|
Understanding License Exceptions: What Developers Need to Kn...
|
Sarah Gooding |
2024-09-20 |
1,168 |
3
|
|
The Unpaid Backbone of Open Source: Solo Maintainers Face In...
|
Sarah Gooding |
2024-09-20 |
941 |
5
|
|
The Wildcard Gamble: Understanding the Risks of Floating Dep...
|
Sarah Gooding |
2024-09-13 |
1,225 |
--
|
|
Introducing the Socket Python SDK
|
Douglas Coburn |
2024-09-13 |
403 |
3
|
|
New Rust RFC Proposes Adding Support for Trusted Publishing ...
|
Sarah Gooding |
2024-09-12 |
628 |
24
|
|
Cloudflare Workers Expands npm Package Support by Combining ...
|
Sarah Gooding |
2024-09-11 |
558 |
--
|
|
Python Software Foundation Expands CNA Scope to Include Pall...
|
Sarah Gooding |
2024-09-09 |
552 |
3
|
|
Developers Burned by Elasticsearch’s License Change Aren’t G...
|
Sarah Gooding |
2024-09-06 |
1,232 |
3
|
|
How Socket Protects Against Revival Hijacking Attacks on PyP...
|
Sarah Gooding |
2024-09-06 |
729 |
3
|