|
n8n Tops 2025 JavaScript Rising Stars as Workflow Platforms Gain Momentum
|
Sarah Gooding |
2026-01-29 |
789 |
--
|
|
Federal Government Rescinds Software Supply Chain Mandates, Makes SBOMs Optional
|
Sarah Gooding |
2026-01-28 |
541 |
--
|
|
Malicious Chrome Extension Performs Hidden Affiliate Hijacking
|
Kush Pandya |
2026-01-27 |
1,426 |
--
|
|
crates.io Ships Security Tab and Tightens Publishing Controls
|
Sarah Gooding |
2026-01-27 |
812 |
--
|
|
Introducing Custom Pull Request Alert Comment Headers - Sock...
|
André Staltz |
2026-01-23 |
496 |
--
|
|
socket.yml v2 now available
|
Joe Werle |
2026-01-23 |
415 |
--
|
|
Introducing Dependency Visualization: An Interactive Way to ...
|
Eli Insua |
2026-01-23 |
413 |
1
|
|
A New Design for GitHub PR Comments
|
André Staltz |
2026-01-23 |
638 |
2
|
|
Introducing Organization Dashboards
|
Bret Comnes |
2026-01-23 |
568 |
--
|
|
Pull Request Alerts in Slack
|
Bret Comnes |
2026-01-23 |
82 |
--
|
|
Customize your GitHub Issue Alerts
|
Bret Comnes |
2026-01-23 |
531 |
--
|
|
Socket VSCode Extension
|
Bradley Meck Farias |
2026-01-23 |
468 |
--
|
|
Introducing Scala and Kotlin Support in Socket
|
Joe Werle |
2026-01-23 |
680 |
--
|
|
5 New Critical Issue Alerts
|
Bret Comnes |
2026-01-23 |
677 |
--
|
|
curl Shuts Down Bug Bounty Program After Flood of AI Slop Reports
|
Sarah Gooding |
2026-01-23 |
1,027 |
--
|
|
Introducing Immutable Scans
|
Nolan Lawson |
2026-01-23 |
804 |
--
|
|
Introducing the Alert Details Page: A Better Way to Explore Alerts
|
André Staltz |
2026-01-22 |
512 |
--
|
|
Node.js 25.4.0 Ships with Stable require(esm)
|
Sarah Gooding |
2026-01-21 |
591 |
--
|
|
PyPI Package Impersonates SymPy to Deliver Cryptomining Malware
|
Kirill Boychenko |
2026-01-21 |
1,669 |
--
|
|
Introducing Supply Chain Attack Campaigns Tracking in the Socket Dashboard
|
Philipp Burckhardt |
2026-01-21 |
759 |
--
|
|
Introducing Custom Tabs for Org Alerts
|
André Staltz |
2026-01-20 |
436 |
--
|
|
Rust Support in Socket Is Now Generally Available
|
Trevor Norris |
2026-01-19 |
562 |
--
|
|
Temporal API Ships in Chrome 144, Marking a Major Shift for JavaScript Date Handling
|
Sarah Gooding |
2026-01-16 |
640 |
3
|
|
5 Malicious Chrome Extensions Enable Session Hijacking in Enterprise HR and ERP Systems
|
Kush Pandya |
2026-01-15 |
3,972 |
--
|
|
Node.js Fixes AsyncLocalStorage Crash Bug That Could Take Down Production Servers
|
Sarah Gooding |
2026-01-14 |
1,050 |
--
|
|
Malicious Chrome Extension Steals MEXC API Keys for Account Takeover
|
Kirill Boychenko |
2026-01-12 |
2,448 |
7
|
|
CVE Volume Surges Past 48,000 in 2025 as WordPress Plugin Ecosystem Drives Growth
|
Sarah Gooding |
2026-01-09 |
785 |
--
|
|
Malicious Twitch Browser Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot Service
|
Kush Pandya |
2026-01-08 |
1,744 |
--
|
|
Insecure Agents Podcast: Certified Patches, Supply Chain Security, and AI Agents
|
Sarah Gooding |
2026-01-08 |
339 |
--
|
|
Tailwind CSS Announces 75% Layoffs as LLMs Reshape OSS Business Models
|
Sarah Gooding |
2026-01-08 |
1,595 |
3
|
|
npm to Implement Staged Publishing After Turbulent Shift Off Classic Tokens
|
Sarah Gooding |
2026-01-07 |
1,310 |
205
|
|
GitHub Actions Pricing Whiplash: Self-Hosted Actions Billing Change Postponed
|
Sarah Gooding |
2026-01-05 |
1,672 |
--
|
|
2025 Report: Destructive Malware in Open Source Packages
|
Kush Pandya |
2025-12-24 |
1,393 |
--
|
|
Engineering with AI Podcast: The Promise of AI-First Development
|
Sarah Gooding |
2025-12-24 |
12,951 |
--
|
|
Spearphishing Campaign Abuses npm Registry to Target U.S. and Allied Manufacturing and Healthcare Organizations
|
Nicholas Anderson and Kirill Boychenko |
2025-12-23 |
2,631 |
--
|
|
Malicious Chrome Extensions “Phantom Shuttle” Masquerade as a VPN to Intercept Traffic and Exfiltrate Credentials
|
Kush Pandya |
2025-12-22 |
2,864 |
1
|
|
Socket Firewall Now Available in Docker Hardened Images
|
Sarah Gooding |
2025-12-17 |
504 |
--
|
|
The Nightmare Before Deployment
|
Ahmad Nassri |
2025-12-16 |
603 |
2
|
|
Malicious NuGet Package Typosquats Popular .NET Tracing Library to Steal Wallet Passwords
|
Kirill Boychenko |
2025-12-15 |
1,996 |
3
|
|
New React Server Components Vulnerabilities: DoS and Source Code Exposure
|
Sarah Gooding |
2025-12-12 |
388 |
--
|
|
Deno 2.6 + Socket: Supply Chain Defense In Your CLI
|
Sarah Gooding |
2025-12-12 |
520 |
3
|
|
Software Engineering Daily Podcast: Feross on AI, Open Source, and Supply Chain Risk
|
Sarah Gooding |
2025-12-11 |
10,160 |
1
|
|
npm Revokes Classic Tokens, as OpenJS Warns Maintainers About OIDC Gaps
|
Sarah Gooding |
2025-12-10 |
1,318 |
3
|
|
Rust RFC Proposes a Security Tab on crates.io for RustSec Advisories
|
Sarah Gooding |
2025-12-09 |
1,073 |
2
|
|
Pretty Themes, Hidden Loaders: GlassWorm-Linked Extensions Span VS Code Marketplace and Open VSX
|
Kirill Boychenko |
2025-12-06 |
3,320 |
--
|
|
Malicious Crate Mimicking ‘Finch’ Exfiltrates Credentials via a Hidden Dependency
|
Kush Pandya |
2025-12-05 |
1,650 |
2
|
|
Malicious Go Packages Impersonate Google’s UUID Library and Exfiltrate Data
|
Kirill Boychenko |
2025-12-05 |
2,004 |
7
|
|
November CVEs Fell 25% YoY, Driven by Slowdowns at Major CNAs
|
Sarah Gooding |
2025-12-04 |
596 |
2
|
|
TypeScript 6.0 Will Be the Last JavaScript-Based Major Release
|
Sarah Gooding |
2025-12-03 |
853 |
--
|
|
npm Sees Surge of Auto-Generated “elf-stats” Packages Published Every Two Minutes
|
Olivia Brown |
2025-12-03 |
7,848 |
--
|
