socket.dev — Scour · Scour

socket.dev

21 posts in the last 30 days

Introducing Reports: An Extensible Reporting Framework for Socket Data

Socket for Jira Is Now Available

Socket Named Top Sales Organization by RepVue

NIST Officially Stops Enriching Most CVEs as Vulnerability Volume Skyrockets

Socket Selected for OpenAI's Cybersecurity Grant Program

Feross on the 10 Minutes or Less Podcast: Nobody Reads the Code

108 Chrome Extensions Linked to Data Exfiltration and Session Theft via Shared C2 Infrastructure

socket.dev·1w·Hacker News

Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline

socket.dev·1w·Hacker News

Don't Kill the Goose That Lays the Golden Eggs

Feross on TBPN: How North Korea Hijacked Axios

Attackers Are Impersonating a Linux Foundation Leader in Slack to Target Open Source Developers

North Korea’s Contagious Interview Campaign Spreads Across 5 Ecosystems, Delivering Staged RAT Payloads

socket.dev·2w·Hacker News

Microsoft Releases Open Source Toolkit for AI Agent Runtime Security

Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign

socket.dev·2w·Hacker News

Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise

socket.dev·2w·Hacker News

Node.js Drops Bug Bounty Rewards After Funding Dries Up

The Hidden Blast Radius of the Axios Compromise

socket.dev·2w·Hacker News

Supply Chain Attack on Axios Pulls Malicious Dependency from npm

socket.dev·3w·Lobsters, Hacker News, r/programming

TeamPCP Compromises Telnyx Python SDK to Deliver Credential-Stealing Malware

TeamPCP Partners With Ransomware Group Vect to Target Open Source Supply Chains

Loading more...