Blogs

Beyond vulnerabilities: Detect malicious dependencies in your supply chain

Semgrep

Semgrep Supply Chain now includes malicious dependency detection to further protect your code.

Visit Site

Beyond vulnerabilities: Detect malicious dependencies in your supply chain
Detect Open Source Malware Attacks with Semgrep Supply ChainSemgrep Beyond Benchmarks: How Semgrep Redefines Javascript SecuritySemgrep Can LLMs Detect IDORs? Understanding the Boundaries of AI ReasoningSemgrep Finding vulnerabilities in modern web apps using Claude Code and OpenAI CodexSemgrep London calling: Highlights from the 2025 cloud & cyber security expoSemgrep Boosting Security Scan Performance for Monorepos with Multicore Parallel ProcessingSemgrep How We Eliminated Long-Lived CI Secrets Across 70+ ReposPulumi Managing dependencies - The Go Programming LanguageGo Unpacking sandbox startup latency: why started ≠ readyModal Cerebras Breaks Exascale Record for Molecular Dynamics Simulations - CerebrasCerebras NO_EXTERNAL_CSS_AT_IMPORTSVercel Lies, damn lies, and benchmarksDeepgram Detect Non-Inclusive Language with Retext and Node.js - Deepgram Blog ⚡️Deepgram How Beyond Retro scaled its retail operations trainingSynthesia How Mondelez Accelerates Supply Chain Training Across 150+ Global Manufacturing PlantsSynthesia Announcing Socket Certified Patches: One-Click Fixes for Vulnerable DependenciesSocket Updated and Ongoing Supply Chain Attack Targets CrowdStrike npm PackagesSocket GlassWorm Loader Hits Open VSX via Developer Account CompromiseSocket Supply Chain Attacks and Cloud Native: What You Need to KnowThenewstack Announcing dependency caching for Pulumi DeploymentsPulumi