TanStack Router Packages Hit by Mini Shai-Hulud TheBeautifulSandsOfTime Supply Chain Attack
Malicious TanStack Router packages provide updated Mini Shai-Hulud style worm attack with encrypted exfil of credentials and dead man's switch.
Beyond vulnerabilities: Detect malicious dependencies in your supply chainSemgrep
Detect Open Source Malware Attacks with Semgrep Supply ChainSemgrep
Sha1-Hulud: The Second Coming of the NPM Worm is Digging For SecretsSemgrep
London calling: Highlights from the 2025 cloud & cyber security expoSemgrep
Boosting Security Scan Performance for Monorepos with Multicore Parallel ProcessingSemgrep
Beyond Benchmarks: How Semgrep Redefines Javascript SecuritySemgrep
How We Eliminated Long-Lived CI Secrets Across 70+ ReposPulumi
Godoc: documenting Go code - The Go Programming LanguageGo
Go.dev: a new hub for Go developers - The Go Programming LanguageGo
Managing dependencies - The Go Programming LanguageGo
Creating an AI Summary App with Next.js | Vercel AcademyVercel
NO_EXTERNAL_CSS_AT_IMPORTSVercel
How Mondelez Accelerates Supply Chain Training Across 150+ Global Manufacturing PlantsSynthesia
Understanding Redis Enterprise Software Support PackagesRedis
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI AttackSocket
Announcing Socket Certified Patches: One-Click Fixes for Vulnerable DependenciesSocket
Introducing Dependency Divergence GitHub ActionSocket
Updated and Ongoing Supply Chain Attack Targets CrowdStrike npm PackagesSocket
Happy Birthday, Shai-HuludSocket
Supply Chain Attacks and Cloud Native: What You Need to KnowThenewstack
