Home / Companies / Socket / Hacker News

Socket on HN

50 posts with 1+ points in 2026

Filters
Year:
Posts by Month (50 total)
Hacker News Posts
Title Points Comments Date
Bitwarden CLI compromised in ongoing Checkmarx supply chain campaign 872 432 2026-04-23
Trivy under attack again: Widespread GitHub Actions tag compromise secrets 250 83 2026-03-22
NPM to implement staged publishing after turbulent shift off classic tokens 205 125 2026-01-07
Mythos Attempted to Social Engineer Open Source Maintainer to Merge Malware 62 39 2026-08-07
Malicious Postinstall Hook Found in 700 GitHub Repos, Including Node Projects 18 4 2026-05-23
AI Agent Lands PRs in Major OSS Projects, Targets Maintainers via Cold … 16 1 2026-02-14
Shai-Hulud-Style NPM Worm Hijacks CI Workflows and Poisons AI Toolchains 10 0 2026-02-21
Laravel Lang Compromised with RCE Backdoor Across 700 Versions 9 1 2026-05-23
Popular Rust Crates Compromised in Build-Time Supply Chain Attack 9 2 2026-08-21
Malicious Chrome Extension Steals MEXC API Keys for Account Takeover 7 None 2026-01-13
108 Chrome Extensions Linked to Data Exfiltration and Session Theft via C2 6 None 2026-04-14
Enisa Technical Advisory on Secure Use of Package Managers 6 None 2026-03-19
The Hidden Blast Radius of the Axios Compromise 6 None 2026-04-01
Tanstack NPM Packages Compromised in Ongoing Supply-Chain Attack 6 None 2026-05-11
Lodash's Security Reset and Maintenance Reboot 5 None 2026-02-02
Trivy Supply Chain Attack Expands to Compromised Docker Images 5 None 2026-03-23
Axios Maintainer Confirms Social Engineering Attack Behind NPM Compromise 5 None 2026-04-03
TeamPCP Is Systematically Targeting Security Tools Across the OSS Ecosystem 5 None 2026-03-25
Ruby Gems and Go Modules Impersonate Dev Tools to Steal Secrets and … 4 None 2026-05-01
Active Supply Chain Attack Compromises Antv Packages on NPM 4 None 2026-05-19
Malicious Checkmarx Artifacts Found in Official KICS Docker Repository 4 None 2026-04-22
Attackers Are Hunting High-Impact Node.js Maintainers with Social Engineering 3 None 2026-04-03
AI Has Taken over Open Source 3 None 2026-05-25
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline 3 None 2026-04-11
Temporal API Ships in Chrome 144, Marking a Major Shift for JavaScript … 3 None 2026-01-16
Tailwind CSS Announces 75% Layoffs as LLMs Reshape OSS Business Models 3 None 2026-01-08
Socket raises $60M Series C at $1B valuation 3 None 2026-05-21
Popular node-ipc NPM Package Infected with Credential Stealer 3 None 2026-05-15
Socket Has Acquired Secure Annex 3 None 2026-04-28
CanisterWorm: NPM Publisher Compromise Deploys Backdoor Across 29 Packages 3 None 2026-03-21
Malicious Go "Crypto" Module Steals Passwords and Deploys Rekoobe Backdoor 3 None 2026-02-26
GlassWorm Loader Hits Open VSX via Developer Account Compromise 3 None 2026-01-31
NPM v12 Ships with Install Scripts Off by Default, Deprecating 2FA-Bypass Tokens 2 None 2026-07-09
Supply Chain Attack Campaign PolinRider 2 None 2026-07-06
New supply chain attack on 34 packages, 100+ versions on NPM, PyPI … 2 None 2026-05-25
Mini Shai-Hulud has crossed from NPM into PyPI 2 None 2026-05-12
SAP Cap NPM Packages Hit by Supply Chain Attack 2 None 2026-04-29
North Korea's Contagious Interview Campaign Spreads Across 5 Ecosystems 2 None 2026-04-07
Supply Chain Attack on Axios Pulls Malicious Dependency from NPM 2 None 2026-03-31
Malicious NPM Packages Use Pastebin Steganography to Deploy Credential Stealer 2 None 2026-02-27
Socket brings supply chain security to skills.sh 2 None 2026-02-19
TrapDoor Crypto Stealer Supply Chain Across NPM, PyPI, and Crates.io 2 None 2026-05-27
Malicious PyPI Wheels Target Bioinformatics and MCP Developers 2 None 2026-06-09
Fsnotify Maintainer Dispute Sparks Supply Chain Concerns 1 None 2026-05-12
PyPI Fixes High-Severity Access Control Issues Found in Security Audit 1 None 2026-05-02
Namastex.ai NPM Packages Hit with TeamPCP-Style CanisterWorm Malware 1 None 2026-04-26
Open VSX Sleeper Extensions Linked to GlassWorm Show New Malware Activations 1 None 2026-04-25
Introducing Data Exports 1 None 2026-04-24
Rolldown drops Rust React Compiler over a 17% binary-size increase 1 None 2026-06-28
Socket Firewall 1 None 2026-06-17
Plushcap, by Matt Makai. 2021-2026.