Home / Companies / Socket / Blog

Socket Blog

785 posts indexed since 2022

Blog URL
Posts YTD
282 ↑ vs 227 last year
Avg Posts/Month
13.1 since 2022
Monthly Post Volume
Monthly post counts
MonthPosts
1-20220
2-20220
3-20222
4-20220
5-20221
6-20221
7-20221
8-20221
9-20221
10-20221
11-20222
12-20222
1-20233
2-20234
3-20236
4-20237
5-20234
6-20232
7-20233
8-20238
9-20230
10-20232
11-20235
12-202314
1-202416
2-202420
3-202410
4-202413
5-202410
6-202413
7-202416
8-202415
9-202419
10-202424
11-202415
12-202414
1-202518
2-202516
3-202519
4-202527
5-202523
6-202520
7-202523
8-202522
9-202518
10-202524
11-202517
12-202521
1-202635
2-202633
3-202643
4-202632
5-202627
6-202627
7-202623
8-202622
9-202615
10-202624
11-20261
Post Details

785 matching posts

Title Author Published Words HN Pts
GlassWASM: WebAssembly Malware Found in Trojanized Open VSX Extensions Joseph Edwards 2026-06-15 3,923 --
US Government Forces Anthropic to Pull Claude Fable Days After Launch Sarah Gooding 2026-06-13 719 --
152 Chrome Live Wallpaper Extensions Hid Ad Tracking and Faked Google Search Traffic Kush Pandya 2026-06-12 4,624 --
Andrew Becherer Joins Socket as Chief Information Security Officer Sarah Gooding 2026-06-11 485 --
Socket Partners with Replit to Block Malicious Packages in AI-Powered Development Feross Aboukhadijeh 2026-06-10 379 --
npm Tooling Bug Incorrectly Marks One-Character Packages as Security Holders Sarah Gooding 2026-06-09 488 --
Mini Shai-Hulud, Miasma, and Hades Worms Target Bioinformatics and MCP Developers via Malicious PyPI Wheels Kirill Boychenko 2026-06-08 2,072 2
Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave Socket Research Team 2026-06-07 2,293 --
RubyGems Adds Cooldown Feature to Bundler for Newly Published Gems Sarah Gooding 2026-06-05 890 --
pnpm 11.5 Adds Support for Recognizing npm Staged Publishes Sarah Gooding 2026-06-04 681 --
Federal Audit Finds NIST Wasted Funds With No Plan to Clear NVD Backlog Sarah Gooding 2026-06-03 2,143 --
Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages Socket Research Team 2026-06-01 4,194 --
Rust Moves to Restrict LLM Use in Contributions After Months of Internal Debate Sarah Gooding 2026-05-31 1,288 --
Famous Chollima Targets PHP Developers Through Compromised Packagist Package Kirill Boychenko 2026-05-31 1,667 --
Malicious NuGet Package Impersonates Sicoob SDK to Exfiltrate Banking Certificates and Passwords Kirill Boychenko 2026-05-28 2,654 --
OSV Withdraws 157 Malware Reports After Automated False Positives Hit npm and PyPI Sarah Gooding 2026-05-27 659 --
Feross on TBPN: Socket's Series C and the State of Software Supply Chain Security Sarah Gooding 2026-05-27 1,834 --
TrapDoor Crypto Stealer Supply Chain Attack Hits 34 Packages and Hundreds of Versions Across npm, PyPI, and Crates.io Socket Research Team 2026-05-24 5,697 2
Laravel Lang Compromised with RCE Backdoor Across 700+ Versions Socket Research Team 2026-05-23 6,365 9
Malicious Postinstall Hook Found Across 700+ GitHub Repositories, Including Packagist and Node.js Projects Socket Research Team 2026-05-22 1,356 18
AI Has Taken Over Open Source André Staltz 2026-05-22 1,356 3
npm Invalidates Granular Access Tokens as Mini Shai-Hulud Sweeps the Registry Sarah Gooding 2026-05-21 1,477 --
Coruna Respawned: Compromised art-template npm Package Leads to iOS Browser Exploit Kit Joseph Edwards 2026-05-20 7,102 --
Socket Raises $60M Series C at a $1B Valuation to Help Enterprises Build Securely With AI Feross Aboukhadijeh 2026-05-20 551 --
Socket raises $60M Series C at $1B valuation led by Thrive Capital to secure AI-driven software development Feross Aboukhadijeh 2026-05-20 1,813 3
Popular Go Decimal Library Targeted by Long-Running Typosquat with DNS Backdoor Kush Pandya 2026-05-19 2,564 --
Active Supply Chain Attack Compromises @antv Packages on npm Socket Research Team 2026-05-19 10,666 4
Popular node-ipc npm Package Infected with Credential Stealer Socket Research Team 2026-05-14 2,650 3
TeamPCP and BreachForums Launch $1,000 Contest for Supply Chain Attacks Sarah Gooding 2026-05-14 710 --
Packagist Urges Immediate Composer Update After GitHub Actions Token Leak Sarah Gooding 2026-05-13 603 --
GemStuffer Campaign Abuses RubyGems as Exfiltration Channel Targeting UK Local Government Joseph Edwards 2026-05-13 3,825 --
Socket Named to Rising in Cyber 2026 List of Top Cybersecurity Startups Sarah Gooding 2026-05-12 266 --
TanStack npm Packages Compromised in Ongoing Mini Shai-Hulud Supply-Chain Attack Socket Research Team 2026-05-11 7,030 6
fsnotify Maintainer Dispute Sparks Supply Chain Concerns Sarah Gooding 2026-05-08 1,352 1
Socket Releases Free Certified Patches for Critical vm2 Sandbox Escape Wenxin Jiang and Marvin Fleischer and Jonah Ghebremichael 2026-05-08 607 --
5 Malicious NuGet Packages Impersonate Chinese UI Libraries to Distribute Crypto Wallet and Credential Stealer Kush Pandya 2026-05-06 2,840 --
pnpm 11 Adds Supply Chain Protection Defaults for Minimum Release Age and Exotic Subdependencies Sarah Gooding 2026-05-04 924 --
PyPI Fixes High-Severity Access Control Issues Found in Security Audit Sarah Gooding 2026-05-01 1,409 1
Malicious Ruby Gems and Go Modules Impersonate Developer Tools to Steal Secrets and Poison CI Kirill Boychenko 2026-05-01 2,574 4
Intercom’s npm Package Compromised in Ongoing Mini Shai-Hulud Worm Attack Socket Research Team 2026-04-30 914 --
lightning PyPI Package Compromised in Supply Chain Attack Socket Research Team 2026-04-30 2,659 --
Mini Shai-Hulud Spreads to Packagist: Malicious Intercom PHP Package Follows npm Compromise Socket Research Team 2026-04-30 1,340 --
TeamPCP-Linked Supply Chain Attack Hits SAP CAP and Cloud MTA npm Packages Socket Research Team 2026-04-29 1,711 2
Malicious npm Package Brand-Squats TanStack to Exfiltrate Environment Variables Socket Research Team 2026-04-29 914 --
Socket Has Acquired Secure Annex Feross Aboukhadijeh 2026-04-28 389 3
73 Open VSX Sleeper Extensions Linked to GlassWorm Show New Malware Activations Socket Research Team 2026-04-25 980 1
Introducing Reachability for PHP Benjamin Barslev 2026-04-24 1,984 --
Introducing Data Exports Ola Adekola 2026-04-23 692 1
Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign Socket Research Team 2026-04-23 884 872
Introducing Organization Notifications in Socket Alex Morais 2026-04-22 564 --
Plushcap, by Matt Makai. 2021-2026.