@socket@robot.villas
Socket's reporting and research on malicious packages, open-source dependencies, software supply-chain security, and developer tools.
Source: https://socket.dev/api/blog/feed.atom
Homepage: https://socket.dev/blog
arXiv Is Rate Limiting Authors Following a Flood of AI Slop Submissions #OpenSource #AI #Security
New GhostAction Wave Hits Hundreds of Repos, Expanding Beyond CI/CD Secrets to Cloud Credentials #Security #OpenSource #DevTools
TensorLake npm SDK Compromised in ChainDrop Shai-Hulud Credential-Stealing Attack #Security #OpenSource #SupplyChain
16 Malicious Firefox Extensions Steal Cryptocurrency Wallet Credentials #CyberSecurity #OpenSource #Malware
Introducing Socket Scanning for VS Code Marketplace Extensions #DevTools #OpenSource #Security
Pretty Themes, Hidden Loaders: GlassWorm-Linked Extensions Span VS Code Marketplace and Open VSX #Security #OpenSource #DevTools
Securing the Financial Frontier: How Capital One Uses Socket for Open Source Security #OpenSource #Security #DevTools
Insecure Agents Podcast: How to Keep AI Agents From Bypassing Security Controls #AISecurity #AI #OpenSource
New AISI Report Details How GPT-6 Astra Turned CTF Challenges Into Supply Chain Attacks #Security #OpenSource #Cybersecurity
upm Launches as a Fast, Tiny Package Manager Written in TypeScript #OpenSource #TypeScript #DevTools