Blogs

Fake Corepack Site Distributes Infostealer and Proxyware to Developers

Socket

A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.

Visit Site

Blogs Socket

BlogsAnthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI AttackSocket BlogsAnnouncing Socket Certified Patches: One-Click Fixes for Vulnerable DependenciesSocket BlogsIntroducing Dependency Divergence GitHub ActionSocket BlogsUpdated and Ongoing Supply Chain Attack Targets CrowdStrike npm PackagesSocket BlogsComparing Reachability Analysis ProvidersSocket BlogsThe Coana Approach to Reachability AnalysisSocket ResourcesPublish changes - MintlifyMintlify NewsHow Argo CD and OpenShift Enable GitOps for DevelopersThenewstack NewsPancakes Are Delicious and Data Centers Are for Free StuffThenewstack NewsIntegrate Jupyter Notebooks with GitHubThenewstack NewsTransform and Future-Proof Your Architecture with MACHThenewstack NewsSelecting the Right Database for Your MicroservicesThenewstack BlogsGo.dev: a new hub for Go developers - The Go Programming LanguageGo BlogsPseudo-Randomly Adding Illustrations with CSS | CSS-TricksCss Tricks BlogsComputed Values: More Than Meets the EyeCss Tricks BlogsThe Serverless Backend for Analytics: Introducing MotherDuck’s Native Integration on VercelMotherduck BlogsRevisiting Docker Hub Policies: Prioritizing Developer ExperienceDocker BlogsNew Docker and JFrog Partnership Designed to Improve the Speed and Quality of App DevelopmentDocker BlogsBringing More Power To Edge Rules! Introducing Variable ExpansionBunny BlogsSupporting the jsDelivr open source CDN with bandwidth for developersBunny