Blogs

npm Shrinkwrap reloaded: Locking npm Deps with Package-Lock and Yarn.Lock

Snyk

Locking or “pinning” dependencies is a widespread best practice in Ruby, Python, and other ecosystems.

Visit Site

Weaponizing AI Coding Agents for Malware in the Nx Malicious Package Security IncidentSnyk What is a Container Registry security?Snyk 10 best practices to containerize Node.js web applications with DockerSnyk How to verify and secure your Mastodon accountSnyk Vulnerability assessmentSnyk Using Snyk reporting for data-driven securitySnyk Go Concurrency Patterns: Context - The Go Programming LanguageGo Introducing Dependency Divergence GitHub ActionSocket Updated and Ongoing Supply Chain Attack Targets CrowdStrike npm PackagesSocket upm Launches as a Fast, Tiny Package Manager Written in TypeScriptSocket Happy Birthday, Shai-HuludSocket Next-level IaC: Powering Up Pulumi with Package EcosystemsPulumi Troubleshooting Python automatic instrumentation issuesOpentelemetry How to Protect Your Projects from the Risks of Deprecated npm PackagesSocket When "Everything" Becomes Too Much: The npm Package Chaos of 2024Socket PolinRider Spreads Through Compromised GitHub Accounts and PackagistSocket Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain AttackSocket Cleaning up import paths in JS/TS packagesSocket Supply Chain Attack on Axios Pulls Malicious Dependency from npmSocket Introducing Socket OptimizeSocket