|
Critical Security Vulnerability in React Server Components
|
Sarah Gooding |
2025-12-03 |
395 |
4
|
|
Malicious Rust Crate evm-units Serves Cross-Platform Payloads for Silent Execution
|
Olivia Brown |
2025-12-02 |
1,645 |
--
|
|
Scaling Socket from Zero to 10,000+ Organizations
|
Sarah Gooding |
2025-12-02 |
185 |
2
|
|
Inside the GitHub Infrastructure Powering North Korea’s Contagious Interview npm Attacks
|
Kirill Boychenko |
2025-11-26 |
5,010 |
10
|
|
Malicious Chrome Extension Injects Hidden SOL Fees Into Solana Swaps
|
Kush Pandya |
2025-11-25 |
1,517 |
--
|
|
Shai Hulud Strikes Again (v2)
|
Socket Research Team |
2025-11-24 |
3,910 |
3
|
|
Introducing Webhook Events for Alert Changes
|
Phil Gates-Idem |
2025-11-21 |
728 |
2
|
|
ENISA Becomes a CVE Root, Expanding Its Role in Europe’s Vulnerability Ecosystem
|
Sarah Gooding |
2025-11-21 |
566 |
--
|
|
Introducing Socket Scanning for OpenVSX Extensions
|
Mix Irving and Ryan Eberhardt |
2025-11-20 |
954 |
--
|
|
Announcing Bun and vlt Support in Socket
|
Ricky Reusser and Eli Insua |
2025-11-19 |
687 |
--
|
|
Announcing Socket Certified Patches: One-Click Fixes for Vulnerable Dependencies
|
Mikola Lysenko, Jordan Harband and Jonah Ghebremichael |
2025-11-18 |
1,420 |
2
|
|
Reachability for Ruby Now in Beta
|
Oskar Haarklou Veileborg |
2025-11-17 |
572 |
--
|
|
npm Malware Campaign Uses Adspect Cloaking to Deliver Malicious Redirects
|
Olivia Brown |
2025-11-17 |
3,290 |
--
|
|
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
|
Philipp Burckhardt |
2025-11-14 |
929 |
1
|
|
PyPI Expands Trusted Publishing to GitLab Self-Managed as Adoption Passes 25 Percent
|
Sarah Gooding |
2025-11-14 |
644 |
--
|
|
Malicious Chrome Extension Exfiltrates Seed Phrases, Enabling Wallet Takeover
|
Kirill Boychenko |
2025-11-12 |
1,371 |
2
|
|
Meet Socket at Black Hat Europe and BSides London 2025
|
Anders Søndergaard |
2025-11-11 |
338 |
3
|
|
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
|
Sarah Gooding |
2025-11-08 |
896 |
--
|
|
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
|
Kush Pandya |
2025-11-06 |
2,255 |
3
|
|
How Enterprise Security Is Adapting to AI-Accelerated Threats
|
Sarah Gooding |
2025-11-04 |
267 |
2
|
|
The Changelog Podcast: Practical Steps to Stay Safe on npm
|
Sarah Gooding |
2025-10-31 |
429 |
2
|
|
Security Community Slams MIT-linked Report Claiming AI Powers 80% of Ransomware
|
Sarah Gooding |
2025-10-30 |
1,140 |
5
|
|
Ruby Core Team Assumes Stewardship of RubyGems and Bundler, Former Maintainers Offer to Transfer All Rights to Matz
|
Sarah Gooding |
2025-10-29 |
1,352 |
3
|
|
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
|
Kush Pandya |
2025-10-28 |
2,559 |
3
|
|
Introducing Socket Firewall Enterprise: Flexible, Configurable Protection for Modern Package Ecosystems
|
Bradley Meck Farias and Dale Bustad |
2025-10-24 |
770 |
3
|
|
New CNAPulse Dashboard Tracks CNA Activity and Disclosure Trends
|
Sarah Gooding |
2025-10-24 |
580 |
2
|
|
Introducing GitHub Actions Scanning Support
|
Rakesh Chatrath and Greg Tystahl |
2025-10-23 |
806 |
2
|
|
Malicious NuGet Packages Typosquat Nethereum to Exfiltrate Wallet Keys
|
Kirill Boychenko |
2025-10-22 |
1,487 |
--
|
|
Introducing Webhook Events for Pull Request Scans
|
Jeppe Hasseriis |
2025-10-22 |
539 |
--
|
|
Unify Your Security Stack with Socket Basics
|
Douglas Coburn and Eli Insua |
2025-10-21 |
1,150 |
1
|
|
Announcing Experimental Malware Scanning for the Hugging Face Ecosystem
|
Wenxin Jiang |
2025-10-20 |
1,597 |
2
|
|
131 Spamware Extensions Targeting WhatsApp Flood Chrome Web Store
|
Kirill Boychenko |
2025-10-18 |
2,418 |
--
|
|
ENISA’s 2025 Threat Landscape: AI Reshapes Cyber Attacks, from Phishing to Supply Chain Abuse
|
Sarah Gooding |
2025-10-16 |
680 |
--
|
|
Vite+ Joins the Push to Consolidate JavaScript Tooling
|
Sarah Gooding |
2025-10-15 |
551 |
1
|
|
Ruby Central Faces Backlash After Publishing Incident Timeline on RubyGems Access Dispute
|
Sarah Gooding |
2025-10-14 |
2,204 |
2
|
|
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
|
Olivia Brown |
2025-10-11 |
1,952 |
--
|
|
Google’s OSV Fix Just Added 500+ New Advisories — All Thanks to One Small Policy Change
|
Jonathan Leitschuh |
2025-10-10 |
940 |
2
|
|
Socket Integrates With Bun 1.3’s Security Scanner API
|
Ahmad Nassri and Bradley Meck Farias |
2025-10-10 |
691 |
3
|
|
North Korea’s Contagious Interview Campaign Escalates: 338 Malicious npm Packages, 50,000 Downloads
|
Kirill Boychenko |
2025-10-10 |
3,160 |
3
|
|
175 Malicious npm Packages Host Phishing Infrastructure Targeting 135+ Organizations
|
Kush Pandya |
2025-10-09 |
2,193 |
3
|
|
Python 3.14 Released With Template String Literals, Deferred...
|
Sarah Gooding |
2025-10-07 |
592 |
6
|
|
Gem Cooperative Emerges as a Community-Run Alternative to Ru...
|
Sarah Gooding |
2025-10-05 |
871 |
30
|
|
PEP 810 Proposes Explicit Lazy Imports for Python 3.15 - Soc...
|
Sarah Gooding |
2025-10-02 |
811 |
--
|
|
PodRocket Podcast: Inside the Recent npm Supply Chain Attack...
|
Sarah Gooding |
2025-10-02 |
235 |
6
|
|
Package Maintainers Call for Improvements to GitHub’s New np...
|
Sarah Gooding |
2025-09-30 |
1,111 |
3
|
|
Introducing Socket Firewall: Free, Proactive Protection for ...
|
Dale Bustad |
2025-09-30 |
1,322 |
8
|
|
Malicious fezbox npm Package Steals Browser Passwords from C...
|
Olivia Brown |
2025-09-22 |
808 |
--
|
|
Identifying and Preventing Fraudulent Engineering Candidates...
|
Socket Research Team |
2025-09-17 |
1,202 |
3
|
|
Updated and Ongoing Supply Chain Attack Targets CrowdStrike ...
|
Sarah Gooding |
2025-09-16 |
884 |
1,233
|
|
pnpm 10.16 Adds New Setting for Delayed Dependency Updates -...
|
Sarah Gooding |
2025-09-15 |
807 |
--
|
