LLM-assisted vulnerability discovery is raising patch volume across the industry and changing how projects ship security fixes. Next.js is the latest to respond, moving to scheduled monthly releases starting July 20. socket.dev/blog/nextjs-...

🎮 11 malicious NuGet tools posed as game cheats to deliver Windows malware that used Google Sheets to track hosts and enforce a remote ban list. Three of the payloads also let Telegram users remotely capture and receive screenshots from the host. socket.dev/blog/11-mali...

🚨 Attackers compromised four npm packages in the @​asyncapi namespace to deliver the Miasma botnet loader. The malware runs when an infected module is imported, then pulls an encrypted payload from IPFS across macOS, Linux, and Windows. socket.dev/blog/asyncap...

🚨 Update: The jscrambler attacker published four more malicious releases: 8.16.0, 8.17.0, 8.18.0, and 8.20.0 with the same infostealer payload. In 8.18.0 and 8.20.0, the dropper moved out of preinstall and into package code, bypassing npm install --ignore-scripts. Upgrade to 8.22.0.

🚨 BREAKING: Socket has identified a supply chain attack targeting the popular jscrambler npm package. The compromised [email protected] release uses a malicious preinstall hook to execute hidden Windows, macOS, or Linux binaries during npm install. socket.dev/blog/jscramb...

New Research: A fake Braintree SDK on NuGet is skimming live payment card data and stealing merchant credentials in production. Its 14M download count is massively inflated to rank it right next to the real package. Full analysis → socket.dev/blog/braintr...

🚨 Socket detected a software supply chain compromise in @​injectivelabs/sdk-ts, a popular npm package with ~50,000 weekly downloads and 87 npm dependents. The malicious release hooks wallet key-derivation functions, records private keys and mnemonics, and exfiltrates them through fake telemetry.

This is a big deal. It kills like 99% of all npm malware we see today. Give or take. It won't go away. Of course. But it helps.

🎉 npm v12 is here! Install scripts are now off by default, git and remote-URL deps no longer resolve unless you allow them, and 2FA-bypass tokens are starting to be phased out. Details → socket.dev/blog/npm-12 #nodejs

🔺 Socket researchers found a malicious Go module posing as a DNS/subdomain scanner. Following that trail exposed 222 GitHub repositories across 190 accounts: fake software projects used to stage Windows RAT and infostealer malware. Full analysis → socket.dev/blog/malicio...

pnpm 11.10 adds a new _auth setting that ties each registry credential to its host, so a malicious or compromised repo file can't redirect your token to a different server. The release also hardens pnpm deploy, pack-app, and more. socket.dev/blog/pnpm-11...

Socket researchers found 17 malicious packages spanning both npm and PyPI, all typosquatting popular Paysafe, Skrill, and Neteller SDKs. The packages mimic payment clients, return fake “success” responses, and quietly harvest developer and CI secrets. socket.dev/blog/npm-pyp...

Node.js is weighing a controversial proposal to move more security reports into public workflows as AI-generated submissions surge. Maintainers say ending bug bounty rewards didn't reduce the volume, and many reports remain duplicated or low-signal. socket.dev/blog/nodejs-... #nodejs #javascript

Node.js is weighing a controversial proposal to move more security reports into public workflows as AI-generated submissions surge. Maintainers say ending bug bounty rewards didn't reduce the volume, and many reports remain duplicated or low-signal. socket.dev/blog/nodejs-... #nodejs #javascript

Every package install brings third-party code into your app. On the Risky Biz podcast, Socket CEO @feross.bsky.social explains how AI coding agents are pulling in more dependencies, faster, often without a human in the loop. Watch the full episode: socket.dev/blog/risky-b...

PolinRider has expanded beyond npm. Socket researchers found malicious artifacts across npm, Packagist, Go modules, and Chrome extensions tied to the broader North Korean Contagious Interview / Famous Chollima campaign. Details → socket.dev/blog/polinri...

Today is my first day at @socket.dev 💖

Every package install brings third-party code into your app. On the Risky Biz podcast, Socket CEO @feross.bsky.social explains how AI coding agents are pulling in more dependencies, faster, often without a human in the loop. Watch the full episode: socket.dev/blog/risky-b...

A VPN extension is not supposed to read your clipboard every 500 milliseconds. Socket researchers found Chrome and Firefox extensions posing as free VPNs that added clipboard stealers in later updates and exfiltrated copied data. socket.dev/blog/chrome-...

Miasma Mini Shai-Hulud has expanded again, this time hitting legitimate @​​immobiliarelabs Backstage plugins on npm. The latest wave compromised GitLab and LDAP auth plugin families used around internal developer portals. socket.dev/blog/miasma-...

Everyone’s got an opinion on #JavaScript build tooling this week. 😅 Rolldown pulled its Rust @react.dev Compiler integration after a 5MB binary size increase raised questions about framework-specific code in @vite.dev. The details: socket.dev/blog/rolldow...

Surreal to see Socket sponsoring NodeConf EU. This is where I gave an impromptu talk on PeerCDN, my first startup, back in 2013, and where I met almost all my Node friends. Awesome to finally pay it forward.

🚀Thrilled to announce @socket.dev as #gold Sponsors of #NodeConfEU 2026! 🌟 Socket is a #cybersecurity platform that protects companies from software supply chain attacks. Find out more👉 socket.dev Thank you! Your partnership is helping us create something truly special in the #Node.js community!

Miasma Mini Shai-Hulud has expanded to the Go ecosystem, with a Verana Blockchain source archive containing malicious Claude and VS Code hooks. This is the same wave that hit LeoPlatform npm packages and targeted GitHub Actions workflows. socket.dev/blog/miasma-...

The Fable shutdown shows how quickly model access can become a business continuity risk. Many teams assumed the frontier AI supply chain was resilient. It’s now clear that access to critical AI infrastructure can change overnight. socket.dev/blog/frontie...

Not a moment too soon! 😅 GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks. socket.dev/blog/github-...

🛡️ @bradarkin.bsky.social has led security and trust at Salesforce, Cisco, and Adobe. Now he’s joined Socket as a strategic advisor. His first post digs into a fast-growing blind spot: AI agents pulling packages into environments no scanner is watching. socket.dev/blog/the-cod...

👀 GitHub + pull_request_target actions/checkout v7 now blocks risky checkout patterns by default 🎉 Great news for the ecosystem, fewer supply chain attack vectors. Let's remind recent security incidents due to this: TanStack, Nx, PostHog, LiteLLM, and more

Not a moment too soon! 😅 GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks. socket.dev/blog/github-...

🚀 Socket Launch Week Day 5: Introducing Repository Access Permissions and Custom Roles. Custom Roles set what a user can do. Repository Access Permissions set which repos those actions apply to. Socket admins can now apply least-privilege access without forcing members into broad built-in roles.

🚀 Socket Launch Week Day 4: Socket MCP is getting a massive update! You can now review org alerts, inspect package artifacts, investigate suspicious packages, and use the Socket threat feed directly from your AI assistant.

🚀 Launch Week Day 3: Socket Firewall now blocks malicious code editor extensions. VS Code and Open VSX extensions run inside developer environments with access to source code, terminals, credentials, and tokens. Now teams can block bad extensions before install or update.

🚨 140+ Mastra npm packages were compromised in a supply chain attack published under the @​mastra/* namespace, including @​mastra/core (~918K weekly downloads). The attack used easy-day-js, a typosquatted dependency, to deliver a cross-platform infostealer. socket.dev/blog/mastra-...

New research: We’re seeing more packages designed to trip up AI malware scanners. This new package uses prompt-injection-style comments, safety-triggering content, context flooding, and obfuscated JS to probe where scanners refuse, truncate, or miss the code that matters. socket.dev/blog/npm-pac...

New Research: Trojanized Open VSX extensions are shipping GlassWASM, a new WebAssembly malware variant. It hides malware logic in TinyGo-compiled WASM and pulls C2 instructions from Solana transaction memos. socket.dev/blog/glasswa...

🚀 Day 2 of Socket Launch Week: We’re excited to introduce Manifest Alerts! Socket now detects supply chain risks found in project manifests, starting with missing lockfiles that can make dependency installs non-reproducible.

New Research: Trojanized Open VSX extensions are shipping GlassWASM, a new WebAssembly malware variant. It hides malware logic in TinyGo-compiled WASM and pulls C2 instructions from Solana transaction memos. socket.dev/blog/glasswa...

🚀 We're kicking off another Socket Launch Week, introducing one new feature every day this week! Day 1 is a big one: Socket for Linear is now available. Turn Socket alerts into Linear issues automatically, with two-way sync that keeps both sides current as things change.

Cynical but the timing benefits other vendors as Anthropic is absolutely building a lead in what many perceive as a 'winner take all' market.

The US government forced Anthropic to pull Claude Fable on Friday night, days after launch. Users spent the week one-shotting code reviews and migrations. Some upgraded specifically for Fable. Now they’re demanding refunds. socket.dev/blog/us-gove...

🧩 New Research: 152 Chrome "live wallpaper" extensions hid ad tracking behind false privacy disclosures and faked Google search traffic to support ad monetization. The network spanned 38 publisher accounts, 3 backend brands, and ~105K installs. socket.dev/blog/152-chr...

Big news for Socket: Andrew Becherer is joining as our first CISO. He brings deep experience leading security at high-growth SaaS companies, and will strengthen the security program behind the infrastructure we operate and the open source ecosystem we protect. socket.dev/blog/andrew-...

🔥 Socket Firewall is now built into Replit's AI-powered development experience. It’s already blocking 8K malicious packages/day across builders on the platform, giving Replit users stronger protection by default at the moment dependencies are introduced. socket.dev/blog/socket-...

npm accidentally marked a bunch of one-character packages as security holders, including c, i, n, x, several numbers, and even the - package. The registry confirmed it was a tooling bug and said a rollback is underway. socket.dev/blog/npm-too...

Mini Shai-Hulud/Miasma/Hades is now targeting bioinformatics and MCP developers in a newer PyPI wave. We found 23 newly compromised PyPI artifacts using multiple execution paths, plus a fake prompt-injection header likely meant to interfere with LLM-based malware triage: socket.dev/blog/mini-sh...

🚨 Mini Shai-Hulud/Miasma has now spread to PyPI. Socket found 37 malicious artifacts across 19 PyPI packages. The packages abuse #Python .pth startup behavior to launch a Bun-powered credential stealer targeting developer, cloud, and CI/CD secrets. socket.dev/blog/shai-hu...

RubyGems 4.0.13 adds a cooldown feature to Bundler for newly published gems. The opt-in setting lets projects delay dependency resolution for new gem versions, reducing exposure during the short window when malicious releases often spread fastest. socket.dev/blog/rubygem...

📦 @pnpm.io 11.5 adds support for recognizing npm staged publishes after staged approval metadata triggered a false downgrade signal. As npm adds more release paths, registry metadata needs to make it clear how each package version was published. socket.dev/blog/pnpm-11...

📦 @pnpm.io 11.5 adds support for recognizing npm staged publishes after staged approval metadata triggered a false downgrade signal. As npm adds more release paths, registry metadata needs to make it clear how each package version was published. socket.dev/blog/pnpm-11...