Socket · Blogs

Blogs listings from Socket on TechiSeek. 128 public listings.

• Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack (Socket)
  Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.
• Announcing Socket Certified Patches: One-Click Fixes for Vulnerable Dependencies (Socket)
  Announcing Socket Certified Patches: One-Click Fixes for Vulnerable Dependencies A safer, faster way to eliminate vulnerabilities without u…
• Introducing Dependency Divergence GitHub Action (Socket)
  Socket discusses the results of using different package managers to install your packages and introduces a GitHub action to expose those di…
• Updated and Ongoing Supply Chain Attack Targets CrowdStrike npm Packages (Socket)
  Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly…
• Comparing Reachability Analysis Providers (Socket)
  Numerous SCA providers offer reachability analysis. This article explores various options, highlighting their pros and cons.
• The Coana Approach to Reachability Analysis (Socket)
  Learn what's different about Coana's approach to reachability and what we do to ensure highly trustworthy results.
• Twitch Browser Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot Service (Socket)
  A Twitch browser extension on Chrome and Firefox forwards users’ live OAuth session tokens through proxies controlled by a Russian bot serv…
• Happy Birthday, Shai-Hulud (Socket)
  It has been one year since Shai-Hulud made its first appearance on npm.
• Free Business Plan Upgrades for Open Source Maintainers (Socket)
  Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, f…
• GlassWorm Loader Hits Open VSX via Developer Account Compromise (Socket)
  Threat actors compromised four oorzc Open VSX extensions with more than 22,000 downloads, pushing malicious versions that install a staged…
• 737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection (Socket)
  The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.
• Large-Scale GitHub Actions Abuse Powers a Distributed cPanel and WHM Exploitation Campaign (Socket)
  A large-scale campaign abused GitHub Actions in compromised repositories to exploit CVE-2026-41940 in cPanel and WHM and steal server crede…
• How to Protect Your Projects from the Risks of Deprecated npm Packages (Socket)
  Deprecated npm packages are common in modern software projects. Learn about the risks of using unmaintained code, how to identify these pac…
• Socket for Asana Is Now Available (Socket)
  Create and manage Asana tasks directly from Socket alerts, with manual task creation, automated ticketing rules, and two-way sync.
• Why Socket Joined the Open Source Security Foundation (Socket)
  Socket is joining the Open Source Security Foundation (OpenSSF), the cross-industry organization working on the most important open source…
• PolinRider Spreads Through Compromised GitHub Accounts and Packagist (Socket)
  Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700…
• Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack (Socket)
  Popular npm packages keyv and cacheable compromised.
• Securing the Financial Frontier: How Capital One Uses Socket for Open Source Security (Socket)
  Capital One is partnering with Socket to proactively secure its open source supply chain.
• Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud (Socket)
  Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
• Cleaning up import paths in JS/TS packages (Socket)
  Cleaning up import paths in JS/TS packages package.json contains a local aliasing mechanism for import paths called "imports" it satisfies…
• Supply Chain Attack on Axios Pulls Malicious Dependency from npm (Socket)
  A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the proj…
• Introducing Socket Optimize (Socket)
  We're excited to introduce Socket Optimize, a powerful CLI command to secure open source dependencies with tested, optimized package overri…
• Suno Breached via Shai-Hulud Worm, Leaked Code Exposes AI Music Scraping (Socket)
  A Shai-Hulud infection exposed Suno's source code, which shows the AI music startup stream-ripped tracks to train its models.
• How to Evaluate an SCA with Reachability: Benchmarking Hard-to-Analyze Language Features (Socket)
  Learn how to effectively assess the accuracy, and consequently the trustworthiness, of a reachability analysis.
• Socket Now Protects the Microsoft Edge Extension Ecosystem (Socket)
  Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge ex…
• What Is SCA with Reachability Analysis? (Socket)
  Unpacking SCA with reachability analysis: Coana's new approach lets you disregard up to 95% false positives.
• Signing is Just the Start (Socket)
  Socket provides an introspective on code signing in relation to the supply chain incident from SolarWinds.
• Introducing Data Exports (Socket)
  Export Socket alert data to your own cloud storage in JSON, CSV, or Parquet, with flexible snapshot or incremental delivery.
• Socket Joins the OpenJS Foundation (Socket)
  Socket is proud to join the OpenJS Foundation as a Silver Member, deepening our commitment to the long-term health and security of the Java…
• OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack (Socket)
  Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
• Vulnerability Scanning is Broken (Socket)
  Coana tackles the inherent flaws in traditional vulnerability scanning, advocating for a smarter, more focused approach.
• Unpacking the ROI of Coana's SCA With Reachability Analysis (Socket)
  Coana redefines vulnerability management, combining efficiency with cost savings. Discover how it enhances security and developer moral.
• Socket Now Protects the Firefox Extension Ecosystem (Socket)
  Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky up…
• Introducing Socket Firewall: Free, Proactive Protection for Your Software Supply Chain (Socket)
  Socket Firewall is a free tool that blocks malicious packages at install time, giving developers proactive protection against rising supply…
• When Autonomous Agents Escape: Why Socket Signed the Cyber Defense Open Letter (Socket)
  Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.
• Let's make JS RegExps Streamy (Socket)
  Proposing a more usable RegExp for JS in light of async I/O and streaming.
• PHP and Composer Support Is Now in Beta (Socket)
  Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.
• Socket Selected for OpenAI's Cybersecurity Grant Program (Socket)
  Socket is an initial recipient of OpenAI's Cybersecurity Grant Program, which commits $10M in API credits to defenders securing open source…
• Socket Joins New OpenJS Program to Fund Node.js Security Work (Socket)
  Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security rele…
• New Study Identifies 53 Slopsquatting Targets Across 5 Frontier LLMs (Socket)
  Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.
• Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data (Socket)
  Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.
• Connect with Socket at RSA and BSidesSF 2024 (Socket)
  Come meet the Socket team at BSidesSF and RSA! We're sponsoring several fun networking events and we would love to see you there.
• Why Your SCA Tool Sucks (Socket)
  Exposing the flaws of traditional SCA tools, and introducing a solution.
• Malicious Go Packages Impersonate Google’s UUID Library and Exfiltrate Data (Socket)
  A pair of typosquatted Go packages posing as Google’s UUID library quietly turn helper functions into encrypted exfiltration channels to a…
• Socket Joins TC54 to Help Shape the Future of SBOMs, CycloneDX, and PURL (Socket)
  Socket is joining TC54 to help develop standards for software supply chain security, contributing to the evolution of SBOMs, CycloneDX, and…
• How to Integrate Socket Into Your Bitbucket Pipeline (Socket)
  Learn how to integrate Socket into your Bitbucket pipeline for added security, reducing your dependency supply chain risk!
• AWS Security Hub Adds Socket for Supply Chain Security (Socket)
  Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.
• Socket for ClickUp Is Now Available (Socket)
  Create ClickUp tasks from Socket alerts, automate ticketing with custom rules, and keep alert and task status synchronized.
• Why Vulnerability Scanning Isn't Enough To Protect Your App (Socket)
  Confidence is good but overconfidence always sinks the ship.
• Socket Named Top Sales Organization by RepVue (Socket)
  Socket won two 2026 Reppy Awards from RepVue, ranking in the top 5% of all sales orgs. AE Alexandra Lister shares what it's like to grow a…