Home / Companies / Socket / Hacker News

Socket on HN

17 posts with 10+ points in 2025

Filters
Year:
Posts by Month (17 total)
Hacker News Posts
Title Points Comments Date
Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised 1,233 1,019 2025-09-16
Active NPM supply chain attack: Tinycolor and 40 Packages Compromised 85 36 2025-09-15
Prettier NPM Packages Compromised in Supply Chain Attack 45 7 2025-07-19
Curl Project and Go Security Teams Reject CVSS as Broken 40 10 2025-01-24
Gem.Coop – Community-Run Alternative to Rubygems.org, Led by Former Maintainers 30 3 2025-10-06
Libxml2 Maintainer Ends Embargoed Vulnerability Reports, Citing Unsustainable 27 8 2025-06-18
DuckDB NPM Account Compromised in Continuing Supply Chain Attack 27 1 2025-09-09
Go Supply Chain Attack: Malicious Package Exploits Go Module 17 0 2025-02-05
NPM 'Is' Package Hijacked in Expanding Supply Chain Attack 14 0 2025-07-22
Open Source Maintainers Demand Ability to Block Copilot-Generated Issues and PRs 14 0 2025-05-20
Researcher Exposes 0-Day Clickjacking Vulnerabilities in Major Password Managers 13 5 2025-08-19
Typosquatted Go Packages Deliver Malware Loader Targeting Linux and macOS 11 1 2025-03-04
The Rise of Slopsquatting 11 4 2025-04-10
AI Slop Is Polluting Bug Bounty Platforms with Fake Vulnerability Reports 11 2 2025-05-07
The GitHub Infrastructure Powering North Korea's Contagious Interview NPM Attack 10 1 2025-11-29
Wget to Wipeout: Malicious Go Modules Fetch Destructive Payload 10 0 2025-05-01
Contagious Interview Campaign Escalates with 67 Malicious NPM Packages and New 10 3 2025-07-14
Plushcap, by Matt Makai. 2021-2026.