Home / Companies / Socket / Blog

Socket Blog

785 posts indexed since 2022

Blog URL
Posts YTD
282 ↑ vs 227 last year
Avg Posts/Month
13.1 since 2022
Monthly Post Volume
Monthly post counts
MonthPosts
1-20220
2-20220
3-20222
4-20220
5-20221
6-20221
7-20221
8-20221
9-20221
10-20221
11-20222
12-20222
1-20233
2-20234
3-20236
4-20237
5-20234
6-20232
7-20233
8-20238
9-20230
10-20232
11-20235
12-202314
1-202416
2-202420
3-202410
4-202413
5-202410
6-202413
7-202416
8-202415
9-202419
10-202424
11-202415
12-202414
1-202518
2-202516
3-202519
4-202527
5-202523
6-202520
7-202523
8-202522
9-202518
10-202524
11-202517
12-202521
1-202635
2-202633
3-202643
4-202632
5-202627
6-202627
7-202623
8-202622
9-202615
10-202624
11-20261
Post Details

785 matching posts

Title Author Published Words HN Pts
Popular Tinycolor npm Package Compromised in Supply Chain At... Socket Research Team 2025-09-15 721 85
Crates.io Users Targeted by Phishing Emails Sarah Gooding 2025-09-12 389 --
Rust Support Now in Beta Joe Werle 2025-09-11 517 4
Announcing Socket Fix 2.0 Joe Werle 2025-09-10 873 --
Feross on Risky Business Weekly Podcast: npm’s Ongoing Suppl... Sarah Gooding 2025-09-10 300 1
Introducing Tier 1 Reachability: Precision CVE Triage for En... Martin Torp 2025-09-09 841 3
MCP Steering Committee Launches Official MCP Registry in Pre... Sarah Gooding 2025-09-09 628 --
DuckDB npm Account Compromised in Continuing Supply Chain At... Socket Research Team 2025-09-09 331 27
npm Author Qix Compromised via Phishing Email in Major Suppl... Socket Research Team 2025-09-08 432 4
Introducing Pull Request Stories to Help Security Teams Tra... André Staltz 2025-09-08 576 --
Malicious npm Packages Impersonate Flashbots SDKs, Targeting... Kush Pandya 2025-09-05 1,069 2
AGENTS.md Gains Traction as an Open Format for AI Coding Age... Sarah Gooding 2025-09-03 899 --
Wallet-Draining npm Package Impersonates Nodemailer to Hijac... Kirill Boychenko 2025-08-29 837 3
Risky Biz Podcast: Making Reachability Analysis Work in Real... Sarah Gooding 2025-08-28 330 --
Nx npm Packages Compromised in Supply Chain Attack Weaponizi... Socket Research Team 2025-08-26 1,129 3
Nx Investigation Reveals GitHub Actions Workflow Exploit Led... Sarah Gooding 2025-08-26 1,183 4
ESLint Adds Support for Parallel Linting, Closing 10-Year-Ol... Sarah Gooding 2025-08-22 490 --
CISA’s 2025 SBOM Guidance Adds Hashes, Licenses, Tool Metada... Sarah Gooding 2025-08-22 765 --
Malicious Go Module Disguised as SSH Brute Forcer Exfiltrates Credentials via Telegram Kirill Boychenko 2025-08-21 1,544 3
Rspack Introduces Rslint, a TypeScript-First Linter Written ... Sarah Gooding 2025-08-20 757 4
Researcher Exposes Zero-Day Clickjacking Vulnerabilities in ... Jonathan Leitschuh 2025-08-19 1,184 13
Oxlint Introduces Type-Aware Linting Preview Sarah Gooding 2025-08-18 682 4
New Website “Is It Really FOSS?” Tracks Transparency in Open... Sarah Gooding 2025-08-15 971 8
Astral Launches pyx: A Python-Native Package Registry - Sock... Sarah Gooding 2025-08-13 842 3
Opengrep Adds Apex Support and New Rule Controls in Latest Updates Sarah Gooding 2025-08-12 622 5
npm Adopts OIDC for Trusted Publishing in CI/CD Workflows - ... Sarah Gooding 2025-08-08 759 --
60 Malicious Ruby Gems Used in Targeted Credential Theft Cam... Kirill Boychenko 2025-08-07 969 3
New CNA Scorecard Tool Ranks CVE Data Quality Across the Eco... Sarah Gooding 2025-08-07 1,112 --
Follow-up and Clarification on Recent Malicious Ruby Gems Ca... Sarah Gooding 2025-08-07 381 --
Malicious npm Packages Target WhatsApp Developers with Remot... Kush Pandya 2025-08-06 1,057 --
TC39 Advances 11 Proposals for Math Precision, Binary APIs, ... Sarah Gooding 2025-08-06 664 3
11 Malicious Go Packages Distribute Obfuscated Remote Payloa... Olivia Brown 2025-08-06 1,094 --
Critical Vulnerability in NestJS Devtools: Localhost RCE via... Jonathan Leitschuh 2025-08-01 1,288 --
Introducing License Overlays: Smarter License Management for... Christopher Bailey 2025-08-01 771 --
Introducing Rust Support in Socket Trevor Norris 2025-07-31 729 8
Announcing Precomputed Reachability Analysis in Socket - Soc... Martin Torp 2025-07-30 870 2
Socket Now Protects the Chrome Extension Ecosystem Joe Werle 2025-07-30 683 2
Introducing Socket MCP for Claude Desktop Alexandros Kapravelos 2025-07-29 839 2
AI + a16z Podcast: Vibe Coding, Security Risks, and the Path... Sarah Gooding 2025-07-25 182 --
Surveillance Malware Hidden in npm and PyPI Packages Targets Developers with Keyloggers, Webcam Capture, and Credential Theft Socket Research Team 2025-07-23 1,134 4
npm ‘is’ Package Hijacked in Expanding Supply Chain Attack -... Socket Research Team 2025-07-22 904 14
Bun 1.2.19 Adds Isolated Installs for Better Monorepo Suppor... Sarah Gooding 2025-07-22 509 5
Critical Vulnerability in Popular npm form-data Package Used... Sarah Gooding 2025-07-22 507 --
Toptal’s GitHub Organization Hijacked: 10 Malicious Packages... Kush Pandya 2025-07-20 1,022 3
Active Supply Chain Attack: npm Phishing Campaign Leads to P... Sarah Gooding 2025-07-19 566 45
npm Phishing Email Targets Developers with Typosquatted Doma... Sarah Gooding 2025-07-18 652 3
Open Source Maintainers Feeling the Weight of the EU’s Cyber... Sarah Gooding 2025-07-17 1,121 1
Crates.io Implements Trusted Publishing Support Sarah Gooding 2025-07-16 663 3
Tracking Protestware Spread: 28 npm Packages Affected by Pay... Olivia Brown 2025-07-15 787 2
Contagious Interview Campaign Escalates With 67 Malicious np... Kirill Boychenko 2025-07-14 1,113 10
Plushcap, by Matt Makai. 2021-2026.