Today on the pod: Deno's Claw Patrol security firewall, npm's response to supply chain attacks, Google I/O updates, and insights on AI's impact on open source. share.transistor.fm/s/3628c66c #typescript

New research: A malicious NuGet package impersonating Sicoob’s official SDK exfiltrated client IDs, PFX passwords, and banking certificates through Sentry telemetry. A fake SDK for stealing API secrets: socket.dev/blog/malicio...

Open source maintainers were already overloaded. AI-driven vulnerability discovery is about to send a lot more findings their way. @feross.bsky.social on TBPN 👇 socket.dev/blog/feross-...

OSV has withdrawn 157 malware reports after automated detections incorrectly flagged npm and PyPI packages as malicious, pushing bad records for trusted projects into OSV-consuming security tools and CI/CD systems. socket.dev/blog/osv-wit...

🚨 BREAKING: Active supply chain attack across npm, PyPI, and Crates.​io. Socket detected TrapDoor, a crypto stealer campaign hitting 34 malicious packages and 384 versions and artifacts, with attackers repeatedly pushing new releases across ecosystems. socket.dev/blog/trapdoo...

🚨 Supply chain attack on the Laravel Lang organization: 700+ historical versions across multiple community-maintained Laravel Lang packages were compromised with an RCE backdoor, including: laravel-lang/lang laravel-lang/http-statuses laravel-lang/attributes Laravel-Lang/actions

🚨 Supply chain attack on the Laravel Lang organization: 700+ historical versions across multiple community-maintained Laravel Lang packages were compromised with an RCE backdoor, including: laravel-lang/lang laravel-lang/http-statuses laravel-lang/attributes Laravel-Lang/actions

npm user? 💡 One small change to stay safe ➡️ Add these @socket.dev Firewall aliases and forget about it ➡️ npm install blocks known malware I use this: - locally, to stay safe - in my CI to detect compromised transitive deps early This completes the pnpm release cooldowns nicely

Socket found a malicious postinstall hook across 700+ GitHub repos, including #PHP packages on Packagist and #Nodejs project repos. The campaign involved malicious commits to affected repositories and reused the same GitHub-hosted payload infrastructure. socket.dev/blog/malicio...

AI has taken over open source, and the data is wild: • npm is now seeing 100k+ packages published per month • packages with em dashes in READMEs jumped from ~5% to 30%+ • AI is increasingly writing packages and choosing dependencies Awesome post by @staltz.com: socket.dev/blog/ai-has-...

i love how @socket.dev's firewall tool is conveniently called 'sfw'— keeps your computer *safe for work*! :D

npm nuked every granular access token that bypasses 2FA after another Mini Shai-Hulud wave compromised hundreds of packages. Good news: staged publishing is now in public preview. socket.dev/blog/npm-inv... #NodeJS #JavaScript

TeamPCP just did an interview where they were asked what defenders should do to stop supply chain attacks. Their advice: "The company @socket.dev will detect the malware before the package even reaches your machine." So... thanks, I think? We're not putting this on the testimonials page.

Attackers took over the art-template npm package and used it to deliver a Coruna-like iOS Safari exploit framework. Socket Threat Research breaks down the package takeover, device fingerprinting, and exploit delivery chain: socket.dev/blog/coruna-...

💥 Read our full official announcement: socket.dev/blog/series-c

Today is a big day for @socket.dev. We raised a $60M Series C at a $1B valuation, led by Thrive Capital. 20,000+ orgs, 1.5M repos protected, 1,000+ supply chain attacks blocked per week. 3/5 FAANG companies are customers. We're just getting started.

The creativity and sophistication of these attacks is impressive. Socket doing epic work here.

Context: bsky.app/profile/sock... But don't worry... there's gonna be another one in 12h anyway, so this is an universal meme

A Go typosquat impersonating the popular shopspring/decimal library stayed benign for years before shipping a DNS TXT backdoor that executes commands on import. The legitimate module has 38K+ known importers, making a single-letter typo a high-value target. socket.dev/blog/popular... #Golang

🚨 BREAKING: Socket is investigating an active npm supply chain attack compromising hundreds of packages in the @​antv ecosystem. The malicious publish wave appears tied to Mini Shai-Hulud and packages connected to the npm maintainer account atool.

Taking more control against supply chain attacks I updated my .zshrc to block npm/pnpm/yarn/uv/pip dependency subcommands and instead prefill the command with the @socket.dev Firewall, which is free for local usage. One extra guarantee.

🚨 node-ipc is compromised again. Three malicious versions (9.1.6, 9.2.3, 12.0.1) published via expired-domain account takeover. Payload steals credentials, SSH keys, cloud tokens, .env files and exfils over DNS. Socket flagged them as malware within 3 min. Details: socket.dev/blog/node-ip...

🚨 Socket detected malicious activity in newly published versions of node-ipc, an npm package with 822K weekly downloads. Affected versions: [email protected] [email protected] [email protected] Socket’s AI scanner flagged the malware within ~3 minutes of publication.

🏁 TeamPCP and BreachForums are running a supply chain attack contest: $1,000 in Monero for the biggest haul of compromised open source packages, measured by download counts. The group open sourced Shai-Hulud as attack tooling and requires it for entry. socket.dev/blog/teampcp...

🏁 TeamPCP and BreachForums are running a supply chain attack contest: $1,000 in Monero for the biggest haul of compromised open source packages, measured by download counts. The group open sourced Shai-Hulud as attack tooling and requires it for entry. socket.dev/blog/teampcp...

🐘 @packagist.com is urging #PHP projects to update Composer after a GitHub token format change caused some GitHub Actions tokens to be exposed in CI logs. GitHub has rolled back the token change for now, but affected projects still need to update Composer. socket.dev/blog/packagi...

🐘 @packagist.com is urging #PHP projects to update Composer after a GitHub token format change caused some GitHub Actions tokens to be exposed in CI logs. GitHub has rolled back the token change for now, but affected projects still need to update Composer. socket.dev/blog/packagi...

💎 New GemStuffer Campaign: Socket detected a RubyGems registry abuse campaign stuffing scraped UK council portal pages into junk gems. PoC worm, scraper, or spam? Low downloads, repeated publishing, and 155 artifacts tracked so far. New Research → socket.dev/blog/gemstuf...

🎉 Socket is proud to be named to the Rising in Cyber 2026 list by Notable Capital, recognizing 30 private cybersecurity startups selected by nearly 150 practicing CISOs and cybersecurity executives. socket.dev/blog/rising-...

🚨 UPDATE: Mini Shai-Hulud has crossed from @npmjs.bsky.social into @pypi.org and is still spreading. Newly confirmed compromised artifacts: @​opensearch-project/opensearch: 3.5.3, 3.6.2, 3.7.0, 3.8.0 (1.3M weekly downloads) mistralai: 2.4.6 on PyPI guardrails-ai: 0.10.1 on PyPI

🚨 Update: Four @opensearch.org Project npm versions are confirmed compromised as part of the ongoing Mini Shai-Hulud campaign: 3.5.3 3.6.2 3.7.0 3.8.0 This project sees 1.3M weekly downloads. We're continuing to track the campaign as it propagates across the npm ecosystem.

⚠️ If you use any TanStack package in any of your projects and there's any chance any of them was updated today, stop what you're doing and read this. ... Actually there are 121 non-tanstack packages affected as well, so check the list anyway.

Was a good morning to roll out our @socket.dev firewall integration which had these packages blocked in ~6min from publish.

Mistral AI npm packages are now confirmed compromised as part of the ongoing Mini Shai-Hulud campaign. We're tracking the expanding supply chain attack, which has already hit TanStack, UiPath, and other package namespaces.

🚨 Active supply chain attack on TanStack. 84 npm packages compromised, including react-router (12M+ weekly downloads). The malware is a self-propagating worm: steals GitHub Actions OIDC tokens, republishes itself to npm as the compromised maintainer. Socket flagged every version within 6 minutes.

84 TanStack npm package artifacts were compromised in the ongoing Mini Shai-Hulud supply chain attack, adding suspected CI credential-stealing malware. Socket flagged every malicious version within six minutes of publication. Details: socket.dev/blog/tanstac...

A maintainer access dispute in fsnotify, a Go library used by 321k projects for cross-platform file notifications, raised supply chain concerns this week after contributors were removed from the GitHub org and a deleted X post fueled takeover speculation. socket.dev/blog/fsnotif... #golang

A maintainer access dispute in fsnotify, a Go library used by 321k projects for cross-platform file notifications, raised supply chain concerns this week after contributors were removed from the GitHub org and a deleted X post fueled takeover speculation. socket.dev/blog/fsnotif... #golang

🔺 Socket is releasing free Certified Patches for a critical sandbox escape vulnerability in vm2. The advisory flags only vm2 3.10.4 on Node 25, but we found it affects all versions before 3.10.5 on Node.js runtimes with WebAssembly.JSTag, including Node.js 24.x. socket.dev/blog/free-ce...

🔺 Socket is releasing free Certified Patches for a critical sandbox escape vulnerability in vm2. The advisory flags only vm2 3.10.4 on Node 25, but we found it affects all versions before 3.10.5 on Node.js runtimes with WebAssembly.JSTag, including Node.js 24.x. socket.dev/blog/free-ce...

🔐 5 malicious NuGet packages impersonated Chinese .NET libraries to deploy a credential and crypto wallet stealer. The payload targets 12 browsers, 5 wallet extensions, 8 desktop crypto wallets, SSH keys, Outlook profiles, Steam sessions, & local files. socket.dev/blog/5-malic...

🧊 Big release for #JavaScript supply chain security: @pnpm.io 11 now defaults to a 1-day Minimum Release Age, blocks exotic subdependencies, and adds a new Allow Builds model. A strong step toward reducing exposure to fast-moving npm attacks → socket.dev/blog/pnpm-11... #nodejs

Following a security audit, PyPI fixed two high-severity access control issues affecting organization owner invites and project transfer permissions. The audit also surfaced issues in trusted publishing and wheel metadata validation. socket.dev/blog/pypi-fi... #Python

We’re so thrilled to have @johntuckner.me join the team! He’s already been doing outstanding work on extension security, and we’re excited to move faster and build more with him at Socket. 💜

Update: We confirmed the Intercom compromise began with a local install of pyannote-audio, which pulled in compromised PyPI lightning as a transitive dependency. 🤯 PyPI lightning → npm intercom-client → Packagist intercom/intercom-php One malicious dependency worming its way across 3 ecosystems.

New Research: Malicious Ruby gems and Go modules impersonated developer tools to steal secrets and poison CI. Socket researchers found credential theft, GitHub Actions tampering, fake Go wrappers, proxy manipulation, and SSH persistence. socket.dev/blog/malicio... #golang

🚨 BREAKING: Mini Shai-Hulud has spread to Packagist. We detected a malicious intercom/[email protected] package artifact tied to this campaign. This is the third supply chain attack we've reported on today, and we're continuing to monitor the campaign: socket.dev/blog/mini-sh...

🚨 We’ve confirmed [email protected] was compromised in the ongoing Mini Shai-Hulud worm attack. It uses a malicious preinstall hook to run an 11.7 MB obfuscated payload designed to steal Kubernetes, Vault, cloud, GitHub, and CI/CD secrets. socket.dev/blog/interco...

🚨 The popular PyPI package lightning has been compromised in a supply chain attack. Socket detected malicious code in versions 2.6.2 and 2.6.3 that executes automatically on import, downloads Bun, and runs an 11 MB obfuscated JavaScript payload designed to steal credentials.

Research post update: → TeamPCP-linked campaign → Preinstall scripts added to compromised packages → Bun used to run payload → Credential theft from dev machines and CI runners → GitHub repos used for encrypted exfiltration → IDE and AI coding assistant persistence via VS Code and Claude Code