Home / Companies / Socket / Blog

Socket Blog

785 posts indexed since 2022

Blog URL
Posts YTD
282 ↑ vs 227 last year
Avg Posts/Month
13.1 since 2022
Monthly Post Volume
Monthly post counts
MonthPosts
1-20220
2-20220
3-20222
4-20220
5-20221
6-20221
7-20221
8-20221
9-20221
10-20221
11-20222
12-20222
1-20233
2-20234
3-20236
4-20237
5-20234
6-20232
7-20233
8-20238
9-20230
10-20232
11-20235
12-202314
1-202416
2-202420
3-202410
4-202413
5-202410
6-202413
7-202416
8-202415
9-202419
10-202424
11-202415
12-202414
1-202518
2-202516
3-202519
4-202527
5-202523
6-202520
7-202523
8-202522
9-202518
10-202524
11-202517
12-202521
1-202635
2-202633
3-202643
4-202632
5-202627
6-202627
7-202623
8-202622
9-202615
10-202624
11-20261
Post Details

785 matching posts

Title Author Published Words HN Pts
Meet Socket at Black Hat and DEF CON 2025 in Las Vegas - Soc... Sarah Gooding 2025-07-12 633 3
Open Source CAI Framework Handles Pen Testing Tasks up to 3,... Sarah Gooding 2025-07-09 1,058 --
Deno 2.4 Brings Back deno bundle, Improves Dependency Manage... Sarah Gooding 2025-07-08 679 --
New CVE Forecasting Tool Predicts 47,000 Disclosures in 2025... Sarah Gooding 2025-07-07 488 --
8 More Malicious Firefox Extensions: Exploiting Popular Game Recognition, Hijacking User Sessions, and Stealing OAuth Credentials Kush Pandya 2025-07-04 1,112 --
Official Go SDK for MCP in Development, Stable Release Expec... Sarah Gooding 2025-07-02 751 --
Potemkin Understanding in LLMs: New Study Reveals Flaws in ... Sarah Gooding 2025-07-01 1,186 7
Django Joins curl in Pushing Back on AI Slop Security Report... Sarah Gooding 2025-06-30 787 6
ECMAScript 2025 Finalized with Iterator Helpers, Set Methods... Sarah Gooding 2025-06-25 560 4
Another Wave: North Korean Contagious Interview Campaign Dro... Kirill Boychenko 2025-06-25 1,123 2
Node.js Homepage Adds Paid Support Link, Prompting Contributor Pushback Sarah Gooding 2025-06-25 1,325 4
Malicious Python Package Typosquats Popular passlib Library,... Kush Pandya 2025-06-24 831 3
A Fresh Look for the Socket Dashboard Joe Werle 2025-06-23 579 --
From Infra Engineer to CISO: A Conversation with Amplitude’s... Feross Aboukhadijeh 2025-06-23 1,463 --
MCP Spec Updated to Add Structured Tool Output and Improved ... Sarah Gooding 2025-06-19 709 --
Survey Finds Over Half of CISOs Manage 10+ Security Areas wi... Sarah Gooding 2025-06-18 756 --
Protestware in JavaScript UI Toolkits on npm Target Russian ... Olivia Brown 2025-06-17 1,009 4
libxml2 Maintainer Ends Embargoed Vulnerability Reports, Cit... Sarah Gooding 2025-06-17 1,015 27
The Growing Risk of Malicious Browser Extensions Kush Pandya 2025-06-13 1,110 6
2025 Blockchain and Cryptocurrency Threat Report: Malware in... Kirill Boychenko 2025-06-12 1,087 2
pnpm 10.12 Introduces Global Virtual Store and Expanded Vers... Sarah Gooding 2025-06-11 583 3
Node.js Moves Toward Stable TypeScript Support with Amaro 1.... Sarah Gooding 2025-06-10 535 4
PyPI Package Disguised as Instagram Growth Tool Harvests Use... Kush Pandya 2025-06-06 1,102 --
Socket Now Supports pylock.toml Files Trevor Norris 2025-06-05 989 --
Destructive npm Packages Disguised as Utilities Enable Remot... Kush Pandya 2025-06-05 1,098 --
Malicious npm Packages Target BSC and Ethereum to Drain Cryp... Olivia Brown 2025-06-02 963 --
TC39 Advances Array.fromAsync, Error.isError, and Explicit R... Sarah Gooding 2025-06-02 438 --
Vite Releases Technical Preview of Rolldown-Vite, a Rust-Bas... Sarah Gooding 2025-05-30 811 --
Malicious npm Package Wipes Codebases with Remote Trigger - ... Kush Pandya 2025-05-30 972 3
Secure Your AI-Generated Code with Socket MCP Alexandros Kapravelos 2025-05-28 1,254 --
OpenJS Foundation Is Now a CNA for 40+ JavaScript Projects U... Sarah Gooding 2025-05-28 655 --
Two Malicious Rust Crates Impersonate Popular Logger to Stea... Kirill Boychenko 2025-05-25 976 --
60 Malicious npm Packages Leak Network and Host Data in Acti... Kirill Boychenko 2025-05-23 885 3
TypeScript Native Previews: 10x Faster Compiler Now on npm f... Sarah Gooding 2025-05-23 592 --
Malicious npm Packages Target React, Vue, and Vite Ecosystem... Kush Pandya 2025-05-21 1,083 --
Malicious Ruby Gems Exfiltrate Telegram Tokens and Messages ... Kirill Boychenko 2025-05-21 1,025 3
Open Source Maintainers Demand Ability to Block Copilot-Gene... Sarah Gooding 2025-05-20 1,016 14
NIST Under Federal Audit for NVD Processing Backlog and Dela... Sarah Gooding 2025-05-20 669 2
Malicious Koishi Chatbot Plugin Exfiltrates Messages Trigger... Kirill Boychenko 2025-05-19 757 4
The Landscape of Malicious Open Source Packages: 2025 Mid‑Ye... Socket Research Team 2025-05-14 1,175 2
ESLint Adds Official Support for Linting HTML Sarah Gooding 2025-05-13 575 --
Socket at Black Hat and DEF CON 2023 Amjed Aboukhadijeh 2025-05-12 176 1
CISA Kills Off RSS Feeds for KEVs and Cyber Alerts Sarah Gooding 2025-05-12 784 --
MCP Community Begins Work on Official MCP Metaregistry - Soc... Sarah Gooding 2025-05-09 900 --
Malicious npm Packages Use Telegram to Exfiltrate BullX Cred... Kush Pandya 2025-05-08 772 3
Backdooring the IDE: Malicious npm Packages Hijack Cursor Ed... Kirill Boychenko 2025-05-07 957 3
Node.js TSC Declines to Endorse Feature Bounty Program - Soc... Sarah Gooding 2025-05-07 950 2
AI Slop Is Polluting Bug Bounty Platforms with Fake Vulnerab... Sarah Gooding 2025-05-06 964 11
NPM targeted by malware campaign mimicking familiar library... Socket Research Team 2025-05-02 902 5
wget to Wipeout: Malicious Go Modules Fetch Destructive Payl... Kush Pandya 2025-05-01 885 10
Plushcap, by Matt Makai. 2021-2026.