Home / Companies / Socket / Blog

Socket Blog

785 posts indexed since 2022

Blog URL
Posts YTD
282 ↑ vs 227 last year
Avg Posts/Month
13.1 since 2022
Monthly Post Volume
Monthly post counts
MonthPosts
1-20220
2-20220
3-20222
4-20220
5-20221
6-20221
7-20221
8-20221
9-20221
10-20221
11-20222
12-20222
1-20233
2-20234
3-20236
4-20237
5-20234
6-20232
7-20233
8-20238
9-20230
10-20232
11-20235
12-202314
1-202416
2-202420
3-202410
4-202413
5-202410
6-202413
7-202416
8-202415
9-202419
10-202424
11-202415
12-202414
1-202518
2-202516
3-202519
4-202527
5-202523
6-202520
7-202523
8-202522
9-202518
10-202524
11-202517
12-202521
1-202635
2-202633
3-202643
4-202632
5-202627
6-202627
7-202623
8-202622
9-202615
10-202624
11-20261
Post Details

785 matching posts

Title Author Published Words HN Pts
Socket Now Protects the Firefox Extension Ecosystem John Tuckner 2026-08-20 986 --
Popular Rust Crates Compromised in Build-Time Supply Chain Attack Socket Research Team 2026-08-20 1,322 9
77 Firefox Extensions Linked to Crypto Wallet and Credential Theft Kirill Boychenko 2026-08-19 5,443 --
How AI Agents Expand the Software Supply Chain Attack Surface Sarah Gooding 2026-08-16 250 --
Socket Now Protects the Microsoft Edge Extension Ecosystem John Tuckner 2026-08-14 1,161 --
White House Authorizes Private Companies to Conduct Offensive Cyber Operations Sarah Gooding 2026-08-13 1,814 --
737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection Kush Pandya 2026-08-11 5,838 --
Free Business Plan Upgrades for Open Source Maintainers Feross Aboukhadijeh 2026-08-07 516 --
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache Sarah Gooding 2026-08-06 833 --
UK Cyber Test: AI Agent Attempted to Social Engineer Open Source Maintainer Into Merging Malware Sarah Gooding 2026-08-05 1,395 62
AWS Security Hub Adds Socket for Supply Chain Security Feross Aboukhadijeh 2026-08-04 583 --
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack Socket Research Team 2026-08-04 2,073 --
Claude Breached 3 Companies and Uploaded Malware to PyPI During Anthropic's Security Tests Sarah Gooding 2026-07-31 1,119 --
Socket Is Sponsoring Composer and Packagist Sarah Gooding 2026-07-31 436 --
Distributed npm Package Cluster Delivers Cross-Platform RAT Targeting Alibaba Developers Karlo Zanki 2026-07-28 2,202 --
Two Joyfill npm Beta Releases Compromised to Deliver DEV#POPPER Remote Access Trojan Socket Research Team 2026-07-28 2,331 --
Socket Releases Free Certified Patches for Nuxt Security Vulnerabilities Wenxin Jiang 2026-07-27 619 --
The AI Industry Is Betting on Open Weights Sarah Gooding 2026-07-27 928 --
Fake Corepack Site Distributes Infostealer and Proxyware to Developers Kirill Boychenko 2026-07-24 943 --
Large-Scale GitHub Actions Abuse Powers a Distributed cPanel and WHM Exploitation Campaign Kirill Boychenko 2026-07-22 2,203 --
New Study Identifies 53 Slopsquatting Targets Across 5 Frontier LLMs Sarah Gooding 2026-07-22 1,200 --
White House Launches Gold Eagle Initiative to Manage Surge in AI-Discovered Vulnerabilities Sarah Gooding 2026-07-17 936 --
Suno Breached via Shai-Hulud Worm, Leaked Code Exposes AI Music Scraping Sarah Gooding 2026-07-16 491 --
Next.js moves to scheduled security releases Sarah Gooding 2026-07-16 869 --
11 Malicious NuGet Tools Pose as Game Cheats to Drop a Windows Host-Surveillance Payload Kush Pandya 2026-07-14 4,726 --
Compromised npm Packages in the AsyncAPI Namespace Deliver Miasma Botnet Loader Socket Research Team 2026-07-14 2,318 --
jscrambler npm Package Compromised in Supply Chain Attack Socket Research Team 2026-07-11 1,588 --
Compromised Injective SDK npm Package Exfiltrates Wallet Keys and Mnemonics Karlo Zanki 2026-07-09 1,102 --
Fake Braintree NuGet Package Skims Credit Cards and Harvests Merchant Credentials Joseph Edwards 2026-07-09 2,793 --
npm v12 Ships With Install Scripts Off by Default, Begins Deprecating 2FA-Bypass Tokens Sarah Gooding 2026-07-08 988 2
Malicious Go Module Exposes GitHub Malware Lure Network Spanning 222 Repositories Kirill Boychenko 2026-07-08 3,855 --
pnpm 11.10 Hardens Registry Authentication to Block Token Redirection Sarah Gooding 2026-07-08 514 --
Coordinated npm and PyPI Campaign Typosquats Popular Secure Payment Apps Joseph Edwards 2026-07-07 1,101 --
Node.js Considers Public Workflow for Security Reports Amid AI-Driven Surge Sarah Gooding 2026-07-06 969 --
PolinRider: North Korea-Linked Supply Chain Campaign Expands Across Open Source Ecosystems Karlo Zanki 2026-07-01 2,477 --
Risky Biz Podcast: AI Agents Are Raising the Stakes for Software Supply Chain Security Sarah Gooding 2026-06-30 210 --
Chrome and Firefox Extensions Posing as Free VPNs Add Clipboard Stealers via Malicious Updates Kirill Boychenko 2026-06-29 3,008 --
Rolldown Pulls Rust React Compiler Integration After Binary Size Increase Sarah Gooding 2026-06-26 969 1
Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages Socket Research Team 2026-06-26 2,094 --
Miasma Mini Shai-Hulud Hits LeoPlatform npm Packages and GitHub Actions, Expands to the Go Ecosystem Socket Research Team 2026-06-25 2,226 --
Frontier AI Is Now Critical Infrastructure Sarah Gooding 2026-06-24 1,631 --
The Code You Didn't Write Is Still Yours to Defend Brad Arkin 2026-06-23 863 --
GitHub Actions Checkout Now Blocks Risky pull_request_target Checkouts Sarah Gooding 2026-06-20 1,196 --
Introducing Repository Access Permissions and Custom Roles Joe Werle 2026-06-19 781 --
Socket MCP Adds Org Alerts, Threat Feed Review, and Package Inspection John Tuckner 2026-06-18 1,150 --
Socket Firewall Now Blocks Malicious VS Code and Open VSX Extensions John Tuckner 2026-06-17 705 --
140+ Mastra npm Packages Compromised in Coordinated Supply Chain Attack Socket Research Team 2026-06-17 2,970 --
npm Package Uses Prompt Injection and Token Flooding to Disrupt AI Malware Scanners Jean-Charles Noirot Ferrand 2026-06-16 2,004 --
Introducing Manifest Alerts André Staltz 2026-06-16 602 --
Socket for Linear Is Now Available Jeppe Hasseriis 2026-06-15 586 --
Plushcap, by Matt Makai. 2021-2026.