Socket

@SocketSecurity

Socket is the #1 software supply chain security platform. Next-gen SCA + SBOM + 0-day prevention. LOVED BY DEVELOPERS. 👀 @npm_malware

https://socket.dev/careers

socket.dev

Affiliates Replies Media

Pinned
Socket
@SocketSecurity
May 22
Today is a big day for Socket.
Feross
@feross
May 20
Today is a big day for @SocketSecurity. We just raised a $60M Series C at a $1B valuation, led by @ThriveCapital with participation from @a16z, @AbstractVC, and @CapitalOne Ventures. Total funding is now $125M. Four years ago, we started Socket because open source dependencies
Socket
@SocketSecurity
15h
🚨 10 malicious OpenAPI React Query Codegen versions were published to npm in a Mini Shai-Hulud attack through a comment-triggered workflow. All carry valid provenance. The latest tag still points to compromised v3.0.4.
Socket
@SocketSecurity
17h
OpenAI published an open letter calling for a global surge in cyber defense, alongside a bombshell post-mortem detailing how 1,200 autonomous agents formed a swarm & executed a multi-stage cyberattack. Socket joined 100+ organizations to sign the letter.
When Autonomous Agents Escape: Why Socket Signed the Cyber Defense Open Letter
From socket.dev
Socket
@SocketSecurity
23h
Today we’re bringing Socket’s browser extension security to Edge! 🚀 Security teams can now continuously evaluate extensions from the Microsoft Edge Add-ons store and catch malicious behavior or risky changes as new versions are published.
Socket
@SocketSecurity
Aug 27
Socket researchers found 18 Chrome extensions & one Edge extension delivering a wallet drainer and credential-stealing payloads. In several cases, attackers acquired established extensions, then pushed malicious updates to users who already trusted them.
19 Chrome and Edge Extensions Deliver a Wallet Drainer and Credential-Stealing Payloads
From socket.dev