Home / Companies / Socket / Blog

Socket Blog

785 posts indexed since 2022

Blog URL
Posts YTD
282 ↑ vs 227 last year
Avg Posts/Month
13.1 since 2022
Monthly Post Volume
Monthly post counts
MonthPosts
1-20220
2-20220
3-20222
4-20220
5-20221
6-20221
7-20221
8-20221
9-20221
10-20221
11-20222
12-20222
1-20233
2-20234
3-20236
4-20237
5-20234
6-20232
7-20233
8-20238
9-20230
10-20232
11-20235
12-202314
1-202416
2-202420
3-202410
4-202413
5-202410
6-202413
7-202416
8-202415
9-202419
10-202424
11-202415
12-202414
1-202518
2-202516
3-202519
4-202527
5-202523
6-202520
7-202523
8-202522
9-202518
10-202524
11-202517
12-202521
1-202635
2-202633
3-202643
4-202632
5-202627
6-202627
7-202623
8-202622
9-202615
10-202624
11-20261
Post Details

785 matching posts

Title Author Published Words HN Pts
Deno Standard Library Stabilized After 4 Years and 4,000 Com... Sarah Gooding 2026-03-10 620 --
Malicious npm Package Targets Solana Developers and Hijacks ... Socket Research Team 2026-03-10 730 --
5 Malicious Rust Crates Posed as Time Utilities to Exfiltrate .env Files Kirill Boychenko 2026-03-10 1,741 --
OpenClaw Advisory Surge Highlights Gaps Between GHSA and CVE Tracking Sarah Gooding 2026-03-10 1,307 --
JavaScript Leaders Demand Oracle Release the JavaScript Trad... Sarah Gooding 2026-03-05 764 --
Fake imToken Chrome Extension Steals Seed Phrases via Phishing Redirects Kirill Boychenko 2026-03-05 1,877 --
Socket Named a Supply Chain Innovator in Latio's 2026 Application Security Market Report Sarah Gooding 2026-03-05 461 --
CISA Announces Initiative to Fortify Security of Open Source... Sarah Gooding 2026-03-03 635 6
rv Is a New Rust-Powered Ruby Version Manager Inspired by Py... Sarah Gooding 2026-03-03 1,075 3
Chinchilla Squeaks Podcast: Modern Solutions for Securing So... Sarah Gooding 2026-03-03 1,476 1
Malicious Packagist Packages Disguised as Laravel Utilities Deploy Encrypted RAT Kush Pandya 2026-03-03 1,593 --
Meet the Socket Team at RSAC and BSidesSF 2026 Sarah Gooding 2026-03-03 415 --
Unauthorized AI Agent Execution Code Published to OpenVSX in Aqua Trivy VS Code Extension Peter van der Zee and Philipp Burckhardt 2026-03-02 3,627 --
NIST Proposes AI-Enabled NVD Overhaul After Cutting Routine CVE Enrichment Sarah Gooding 2026-03-01 2,087 --
Strengthening Crypto Supply Chain Security Is a Necessity, N... Sarah Gooding 2026-02-28 1,223 --
minimatch Patches 3 High-Severity ReDoS Vulnerabilities Sarah Gooding 2026-02-28 729 --
StegaBin: 26 Malicious npm Packages Use Pastebin Steganography to Deploy Multi-Stage Credential Stealer Philipp Burckhardt and Peter van der Zee 2026-02-27 4,377 2
Risky Business Podcast: Why Open Source Software Needs Bette... Sarah Gooding 2026-02-26 396 3
Interview on the Daytona DotFiles Insider Blog Sarah Gooding 2026-02-26 233 1
Static vs. Runtime Reachability: Insights from Latio’s On th... Sarah Gooding 2026-02-26 411 2
GitHub Removes Malicious Pull Requests Targeting Open Source... Sarah Gooding 2026-02-26 512 2
White House to Tackle Cybersecurity Regulation Fragmentation... Sarah Gooding 2026-02-26 916 2
Malicious Go “crypto” Module Steals Passwords and Deploys Rekoobe Backdoor Kirill Boychenko 2026-02-26 2,254 3
npm Introduces minimumReleaseAge and Bulk OIDC Configuration Sarah Gooding 2026-02-26 669 --
Cyber Extortion Demands Skyrocket in 2023 While Fewer Compan... Sarah Gooding 2026-02-24 589 2
Mobile, Alabama Hospital Refuses to Pay Settlement in Landma... Sarah Gooding 2026-02-24 706 5
The “Non-Existent Author” Alert: How to Safeguard Against th... Sarah Gooding 2026-02-24 672 --
AI + a16z Podcast: Combatting Modern Supply Chain Attacks wi... Sarah Gooding 2026-02-24 311 1
Knip Hits 500 Releases with v5.62.0, Improving TypeScript Co... Sarah Gooding 2026-02-24 375 4
Risky Biz Podcast: Open Source Risk Is Compounding as AI Agents Write 90% of New Code Sarah Gooding 2026-02-24 222 --
What’s in your npm stat counter? A love doll store—we hope n... Ax Sharma 2026-02-23 470 1
Four Malicious NuGet Packages Target ASP.NET Developers With JIT Hooking and Credential Exfiltration Kush Pandya 2026-02-23 3,466 --
SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains Socket Research Team 2026-02-20 7,183 10
Socket Security Analysis Is Now One Click Away on npm Sarah Gooding 2026-02-19 474 --
Socket Joins the OpenJS Foundation Sarah Gooding 2026-02-19 414 --
Cline CLI npm Package Compromised via Suspected Cache Poisoning Attack Sarah Gooding 2026-02-18 1,079 --
Introducing PHP and Composer Support in Socket Trevor Norris 2026-02-17 980 --
Socket Brings Supply Chain Security to skills.sh Wenxin Jiang and Alexandros Kapravelos 2026-02-17 701 2
AI Agent Lands PRs in Major OSS Projects, Targets Maintainers via Cold Outreach Sarah Gooding 2026-02-14 1,922 16
Malicious Chrome Extension Steals Meta Business Manager Exports and TOTP 2FA Seeds Kirill Boychenko 2026-02-13 2,621 --
High-Severity RCE Vulnerability Disclosed in next-mdx-remote Sarah Gooding 2026-02-12 630 --
AI Agent Submits PR to Matplotlib, Publishes Angry Blog Post After Rejection Sarah Gooding 2026-02-12 1,959 --
OpenClaw Skill Marketplace Emerges as Active Malware Vector Sarah Gooding 2026-02-09 1,205 --
The Next Open Source Security Race: Triage at Machine Speed Sarah Gooding 2026-02-06 1,361 --
Malicious dYdX Packages Published to npm and PyPI After Maintainer Compromise Kush Pandya 2026-02-06 2,458 --
gem.coop Tests Dependency Cooldowns as Package Ecosystems Move to Slow Down Attacks Sarah Gooding 2026-02-05 444 --
Open VSX Begins Implementing Pre-Publish Security Checks After Repeated Supply Chain Incidents Sarah Gooding 2026-02-02 811 --
72 Malicious Open VSX Extensions Linked to GlassWorm Campaign Now Using Transitive Dependencies Socket Research Team 2026-01-31 1,820 --
Inside Lodash’s Security Reset and Maintenance Reboot Sarah Gooding 2026-01-31 1,528 5
GlassWorm Loader Hits Open VSX via Developer Account Compromise Kirill Boychenko 2026-01-31 2,317 3
Plushcap, by Matt Makai. 2021-2026.