Blogs

SHA1-Hulud, npm Supply Chain Incident

Snyk

Snyk identified a new supply chain attack in the npm ecosystem, referred to as SHA1-Hulud.

Visit Site

Weaponizing AI Coding Agents for Malware in the Nx Malicious Package Security IncidentSnyk What is a Container Registry security?Snyk 10 best practices to containerize Node.js web applications with DockerSnyk How to verify and secure your Mastodon accountSnyk Vulnerability assessmentSnyk Using Snyk reporting for data-driven securitySnyk How We Eliminated Long-Lived CI Secrets Across 70+ ReposPulumi NO_EXTERNAL_CSS_AT_IMPORTSVercel How Mondelez Accelerates Supply Chain Training Across 150+ Global Manufacturing PlantsSynthesia Announcing Socket Certified Patches: One-Click Fixes for Vulnerable DependenciesSocket Updated and Ongoing Supply Chain Attack Targets CrowdStrike npm PackagesSocket upm Launches as a Fast, Tiny Package Manager Written in TypeScriptSocket Happy Birthday, Shai-HuludSocket Supply Chain Attacks and Cloud Native: What You Need to KnowThenewstack Policy as Code for Any Cloud ProviderPulumi What is Root Cause Analysis?Datadoghq Webinar Recap: Webinar Recap: Securing the Software Supply Chain with Docker BusinessDocker How to Protect Your Projects from the Risks of Deprecated npm PackagesSocket When "Everything" Becomes Too Much: The npm Package Chaos of 2024Socket Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain AttackSocket