Shai-Hulud's downstream impact is still coming to light. The worm hit tens of thousands of GitHub repos, and the latest breach is Suno, whose leaked source code shows how it scraped YouTube, Deezer, and Genius to train its models. 🎩 First reported by @404media.co. socket.dev/blog/suno-br...

🚨 Update: The jscrambler attacker published four more malicious releases: 8.16.0, 8.17.0, 8.18.0, and 8.20.0 with the same infostealer payload. In 8.18.0 and 8.20.0, the dropper moved out of preinstall and into package code, bypassing npm install --ignore-scripts. Upgrade to 8.22.0.

🚨 BREAKING: Socket has identified a supply chain attack targeting the popular jscrambler npm package. The compromised [email protected] release uses a malicious preinstall hook to execute hidden Windows, macOS, or Linux binaries during npm install. socket.dev/blog/jscramb...

🚨 Socket detected a software supply chain compromise in @​injectivelabs/sdk-ts, a popular npm package with ~50,000 weekly downloads and 87 npm dependents. The malicious release hooks wallet key-derivation functions, records private keys and mnemonics, and exfiltrates them through fake telemetry.

🎉 npm v12 is here! Install scripts are now off by default, git and remote-URL deps no longer resolve unless you allow them, and 2FA-bypass tokens are starting to be phased out. Details → socket.dev/blog/npm-12 #nodejs

Node.js is weighing a controversial proposal to move more security reports into public workflows as AI-generated submissions surge. Maintainers say ending bug bounty rewards didn't reduce the volume, and many reports remain duplicated or low-signal. socket.dev/blog/nodejs-... #nodejs #javascript

Every package install brings third-party code into your app. On the Risky Biz podcast, Socket CEO @feross.bsky.social explains how AI coding agents are pulling in more dependencies, faster, often without a human in the loop. Watch the full episode: socket.dev/blog/risky-b...

"Anyone can contribute" is not the same as "everyone has the same opportunity to contribute". AI could reduce the privilege of free time in Open Source, but only if access and skill become shared, not private advantages. I wrote about it in dri.es/the-privileg... #opensource #ai

Miasma Mini Shai-Hulud has expanded to the Go ecosystem, with a Verana Blockchain source archive containing malicious Claude and VS Code hooks. This is the same wave that hit LeoPlatform npm packages and targeted GitHub Actions workflows. socket.dev/blog/miasma-...

Surreal to see Socket sponsoring NodeConf EU. This is where I gave an impromptu talk on PeerCDN, my first startup, back in 2013, and where I met almost all my Node friends. Awesome to finally pay it forward.

The Fable shutdown shows how quickly model access can become a business continuity risk. Many teams assumed the frontier AI supply chain was resilient. It’s now clear that access to critical AI infrastructure can change overnight. socket.dev/blog/frontie...

Not a moment too soon! 😅 GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks. socket.dev/blog/github-...

🚀 Socket Launch Week Day 5: Introducing Repository Access Permissions and Custom Roles. Custom Roles set what a user can do. Repository Access Permissions set which repos those actions apply to. Socket admins can now apply least-privilege access without forcing members into broad built-in roles.

🚀 Socket Launch Week Day 4: Socket MCP is getting a massive update! You can now review org alerts, inspect package artifacts, investigate suspicious packages, and use the Socket threat feed directly from your AI assistant.

🚀 Launch Week Day 3: Socket Firewall now blocks malicious code editor extensions. VS Code and Open VSX extensions run inside developer environments with access to source code, terminals, credentials, and tokens. Now teams can block bad extensions before install or update.

🚨 140+ Mastra npm packages were compromised in a supply chain attack published under the @​mastra/* namespace, including @​mastra/core (~918K weekly downloads). The attack used easy-day-js, a typosquatted dependency, to deliver a cross-platform infostealer. socket.dev/blog/mastra-...

New Research: Trojanized Open VSX extensions are shipping GlassWASM, a new WebAssembly malware variant. It hides malware logic in TinyGo-compiled WASM and pulls C2 instructions from Solana transaction memos. socket.dev/blog/glasswa...

🚀 Day 2 of Socket Launch Week: We’re excited to introduce Manifest Alerts! Socket now detects supply chain risks found in project manifests, starting with missing lockfiles that can make dependency installs non-reproducible.

The US government forced Anthropic to pull Claude Fable on Friday night, days after launch. Users spent the week one-shotting code reviews and migrations. Some upgraded specifically for Fable. Now they’re demanding refunds. socket.dev/blog/us-gove...

npm accidentally marked a bunch of one-character packages as security holders, including c, i, n, x, several numbers, and even the - package. The registry confirmed it was a tooling bug and said a rollback is underway. socket.dev/blog/npm-too...

📦 @pnpm.io 11.5 adds support for recognizing npm staged publishes after staged approval metadata triggered a false downgrade signal. As npm adds more release paths, registry metadata needs to make it clear how each package version was published. socket.dev/blog/pnpm-11...

Rust is moving toward a formal LLM contribution policy after months of heated internal debate, driven by a wave of low-effort "slop PRs" straining maintainers. The proposal bans LLM authorship but allows private use. socket.dev/blog/rust-mo...

🚨 Active supply chain attack: A mini Shai-Hulud campaign hit npm packages under the @​redhat-cloud-services namespace. The compromised packages execute install-time malware to harvest developer and CI/CD secrets, with encrypted exfiltration and GitHub-based fallback. socket.dev/blog/mini-sh...

Open source maintainers were already overloaded. AI-driven vulnerability discovery is about to send a lot more findings their way. @feross.bsky.social on TBPN 👇 socket.dev/blog/feross-...

🚨 BREAKING: Active supply chain attack across npm, PyPI, and Crates.​io. Socket detected TrapDoor, a crypto stealer campaign hitting 34 malicious packages and 384 versions and artifacts, with attackers repeatedly pushing new releases across ecosystems. socket.dev/blog/trapdoo...

"AI is now driving both the production and consumption of open source software. AI-generated music ends in human ears, and AI-generated images mostly benefit humans, but AI-generated software is an ouroboros (a snake eating its own tail) which is just getting started." - @staltz.com

"To every maintainer and developer working in open source: we see what you're up against, we're with you, and we're going to keep working to defend it." 🥹💜

🚨 BREAKING: Socket is investigating an active npm supply chain attack compromising hundreds of packages in the @​antv ecosystem. The malicious publish wave appears tied to Mini Shai-Hulud and packages connected to the npm maintainer account atool.

🚨 Socket detected malicious activity in newly published versions of node-ipc, an npm package with 822K weekly downloads. Affected versions: [email protected] [email protected] [email protected] Socket’s AI scanner flagged the malware within ~3 minutes of publication.

🐘 @packagist.com is urging #PHP projects to update Composer after a GitHub token format change caused some GitHub Actions tokens to be exposed in CI logs. GitHub has rolled back the token change for now, but affected projects still need to update Composer. socket.dev/blog/packagi...

Was a good morning to roll out our @socket.dev firewall integration which had these packages blocked in ~6min from publish.

🚨 UPDATE: Mini Shai-Hulud has crossed from @npmjs.bsky.social into @pypi.org and is still spreading. Newly confirmed compromised artifacts: @​opensearch-project/opensearch: 3.5.3, 3.6.2, 3.7.0, 3.8.0 (1.3M weekly downloads) mistralai: 2.4.6 on PyPI guardrails-ai: 0.10.1 on PyPI

84 TanStack npm package artifacts were compromised in the ongoing Mini Shai-Hulud supply chain attack, adding suspected CI credential-stealing malware. Socket flagged every malicious version within six minutes of publication. Details: socket.dev/blog/tanstac...

A maintainer access dispute in fsnotify, a Go library used by 321k projects for cross-platform file notifications, raised supply chain concerns this week after contributors were removed from the GitHub org and a deleted X post fueled takeover speculation. socket.dev/blog/fsnotif... #golang

🔺 Socket is releasing free Certified Patches for a critical sandbox escape vulnerability in vm2. The advisory flags only vm2 3.10.4 on Node 25, but we found it affects all versions before 3.10.5 on Node.js runtimes with WebAssembly.JSTag, including Node.js 24.x. socket.dev/blog/free-ce...

🧊 Big release for #JavaScript supply chain security: @pnpm.io 11 now defaults to a 1-day Minimum Release Age, blocks exotic subdependencies, and adds a new Allow Builds model. A strong step toward reducing exposure to fast-moving npm attacks → socket.dev/blog/pnpm-11... #nodejs

🚨 Active supply chain attacks on both PyPI and npm today. lightning 2.6.2/2.6.3 and intercom-client 7.0.4 are compromised with credential-stealing malware. Same attacker, same tooling, two ecosystems. Downgrade immediately.

Thanks to @jessicalyons.bsky.social for bringing more attention to this story. OSS security tools are getting hammered right now, and this piece captures why these incidents matter beyond any one vendor compromise.

We’re so thrilled to have @johntuckner.me join the team! He’s already been doing outstanding work on extension security, and we’re excited to move faster and build more with him at Socket. 💜

We’re tracking 73 Open VSX sleeper extensions tied to the GlassWorm campaign, with at least 6 already activated to deliver malware. These cloned extensions initially appear benign, then later become malware delivery vehicles through normal updates. socket.dev/blog/73-open...

Exciting to see the fake stars research from CMU, NCSU, and Socket engineers featured on @awesomeagents.bsky.social! This is the origin of our "Suspicious Stars on GitHub" supply chain alert for packages that are associated with these repos. More info here: ⭐️ socket.dev/blog/3-7-mil...

🔺 We updated our technical analysis for the Bitwarden compromise. Third supply chain compromise in 3 days: a security scanner, an AI agent CLI, and a password manager CLI. Attackers are hammering tools with privileged access to infrastructure, so keep your eyes open this week. This is life now.

Heads up! Bitwarden CLI 2026.4.0 was compromised as part of the ongoing Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline. We’ll continue updating our coverage as more details are confirmed. socket.dev/blog/bitward...

PSA: "Organizations that used the affected image to scan Terraform, CloudFormation, or Kubernetes configurations should consider any secrets or credentials exposed to those scans potentially at risk."

🚨 Breaking: Namastex Labs, the team behind Automagik[.]dev, hit with a supply chain attack affecting its npm packages. The malicious versions replicate TeamPCP-style Canister Worm tradecraft, including secret theft, exfiltration, and self-propagation. socket.dev/blog/namaste...

🚀 Day 2 of Socket Launch Week: Introducing Reports! Reports is a new page in the Socket dashboard for chart-based views of vulnerabilities, dependencies, and usage, built to make that data easier to share across reviews, presentations, and recurring reporting workflows.

🚀 We’re kicking off another Launch Week at Socket, with something new to share every day this week! First up: Socket for Jira is now available! This new integration lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.

❗️NIST is officially giving up on enriching most CVEs. Only KEV, federal software, & EO 14028 critical software will get CVSS scores and CPE data. Everything else gets labeled "Not Scheduled." What happens when AI-driven discovery meets a shrinking NVD → socket.dev/blog/nist-of...

Nobody reads the code before installing it. That’s always been the reality of open source security, but now AI is massively increasing the amount of code being written and shipped. @feross.bsky.social breaks it down in 10 minutes on @rohdeali.bsky.social's podcast: www.youtube.com/shorts/euRDj...