| | Popular Rust Crates Compromised in Build-Time Supply Chain Attack (socket.dev) |
| 9 points by dabinat 19 days ago | past | 2 comments |
|
| | Firefox Extensions Linked to Crypto Wallet and Credential Theft (socket.dev) |
| 2 points by speckx 20 days ago | past |
|
| | Malicious Chrome VPN Extensions Discovered That Do Traffic Redirection (socket.dev) |
| 2 points by feross 29 days ago | past |
|
| | npm RAT Targets Alibaba (socket.dev) |
| 1 point by Georgelemental 30 days ago | past |
|
| | Mythos Attempted to Social Engineer Open Source Maintainer to Merge Malware (socket.dev) |
| 62 points by bhavansig 34 days ago | past | 39 comments |
|
| | NPM Packages in the Keyv and Cacheable Namespaces Compromised (socket.dev) |
| 5 points by tilt 36 days ago | past | 1 comment |
|
| | Socket.dev warns about Rust Tokio library obfuscation (socket.dev) |
| 6 points by cwaffles 37 days ago | past | 1 comment |
|
| | 140+ Mastra npm Packages Compromised in Coordinated Supply Chain Attack (socket.dev) |
| 3 points by crashpn 58 days ago | past |
|
| | NPM v12 Ships with Install Scripts Off by Default, Deprecating 2FA-Bypass Tokens (socket.dev) |
| 2 points by nreece 63 days ago | past |
|
| | Supply Chain Attack Campaign PolinRider (socket.dev) |
| 2 points by _____k 65 days ago | past |
|
| | Rolldown drops Rust React Compiler over a 17% binary-size increase (socket.dev) |
| 1 point by logickkk1 73 days ago | past |
|
| | Socket Firewall (socket.dev) |
| 1 point by ilreb 84 days ago | past |
|
| | Mini Shai-Hulud, Miasma, and Hades Worms Target Bioinformati (socket.dev) |
| 2 points by rbanffy 88 days ago | past |
|
| | Malicious PyPI Wheels Target Bioinformatics and MCP Developers (socket.dev) |
| 2 points by fbuilesv 3 months ago | past | 1 comment |
|
| | TrapDoor Crypto Stealer Supply Chain Across NPM, PyPI, and Crates.io (socket.dev) |
| 2 points by a-french-anon 3 months ago | past | 1 comment |
|
| | New supply chain attack on 34 packages, 100+ versions on NPM, PyPI and crates.io (socket.dev) |
| 2 points by aghuang 3 months ago | past |
|
| | AI Has Taken over Open Source (socket.dev) |
| 3 points by ChicknNuggt 3 months ago | past | 1 comment |
|
| | TrapDoor supply chain attack hits PyPI, NPM, and crates.io (socket.dev) |
| 2 points by rvz 3 months ago | past |
|
| | Laravel Lang Compromised with RCE Backdoor Across 700 Versions (socket.dev) |
| 9 points by csmantle 3 months ago | past | 1 comment |
|
| | Laravel Lang Compromised with RCE Backdoor Across 700 Versions (socket.dev) |
| 4 points by gpi 3 months ago | past |
|
| | Malicious Postinstall Hook Found in 700 GitHub Repos, Including Node Projects (socket.dev) |
| 18 points by 882542F3884314B 3 months ago | past | 4 comments |
|
| | Socket raises $60M Series C at $1B valuation (socket.dev) |
| 3 points by slymax 3 months ago | past |
|
| | Active Supply Chain Attack Compromises Antv Packages on NPM (socket.dev) |
| 4 points by 882542F3884314B 3 months ago | past |
|
| | Popular node-ipc NPM Package Infected with Credential Stealer (socket.dev) |
| 3 points by csmantle 3 months ago | past |
|
| | Fsnotify Maintainer Dispute Sparks Supply Chain Concerns (socket.dev) |
| 1 point by elashri 4 months ago | past |
|
| | TanStack NPM Packages Compromised in Ongoing Mini Shai-Hulud Supply-Chain Attack (socket.dev) |
| 2 points by croes 4 months ago | past | 1 comment |
|
| | Tanstack NPM Packages Compromised in Ongoing Supply-Chain Attack (socket.dev) |
| 6 points by pier25 4 months ago | past | 1 comment |
|
| | PyPI Fixes High-Severity Access Control Issues Found in Security Audit (socket.dev) |
| 1 point by feross 4 months ago | past |
|
| | Ruby Gems and Go Modules Impersonate Dev Tools to Steal Secrets and Poison CI (socket.dev) |
| 4 points by ilreb 4 months ago | past |
|
| | SAP Cap NPM Packages Hit by Supply Chain Attack (socket.dev) |
| 2 points by salkahfi 4 months ago | past |
|
|
| More |
