Axios Supply Chain Incident: Indicators of Compromise
Axios, the very popular HTTP client library, was compromised for three hours on March 30 th.
Beyond vulnerabilities: Detect malicious dependencies in your supply chainSemgrep
Detect Open Source Malware Attacks with Semgrep Supply ChainSemgrep
London calling: Highlights from the 2025 cloud & cyber security expoSemgrep
Boosting Security Scan Performance for Monorepos with Multicore Parallel ProcessingSemgrep
Beyond Benchmarks: How Semgrep Redefines Javascript SecuritySemgrep
Benchmarking Semgrep Community Edition Performance ImprovementsSemgrep
How We Eliminated Long-Lived CI Secrets Across 70+ ReposPulumi
NO_EXTERNAL_CSS_AT_IMPORTSVercel
How Mondelez Accelerates Supply Chain Training Across 150+ Global Manufacturing PlantsSynthesia
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI AttackSocket
Announcing Socket Certified Patches: One-Click Fixes for Vulnerable DependenciesSocket
Updated and Ongoing Supply Chain Attack Targets CrowdStrike npm PackagesSocket
GlassWorm Loader Hits Open VSX via Developer Account CompromiseSocket
Supply Chain Attacks and Cloud Native: What You Need to KnowThenewstack
Policy as Code for Any Cloud ProviderPulumi
What is Root Cause Analysis?Datadoghq
Webinar Recap: Webinar Recap: Securing the Software Supply Chain with Docker BusinessDocker
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain AttackSocket
Securing the Financial Frontier: How Capital One Uses Socket for Open Source SecuritySocket
Supply Chain Attack on Axios Pulls Malicious Dependency from npmSocket
