AWS Security Hub Adds Socket for Supply Chain Security
AWS Security Hub now offers Socket for supply chain security, catching malicious open source packages.
Summary
AWS Security Hub's Extended plan now includes Socket, a tool focused on supply chain security, particularly for detecting malicious open source packages. Socket uses behavioral analysis to identify threats that signature-based tools might miss across various package ecosystems like npm, PyPI, and Maven. This integration allows AWS customers to procure Socket through their existing AWS spend, with consolidated billing and a free first month.
Full text
Security News/Company NewsSocket Is Sponsoring Composer and PackagistSocket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.By Sarah Gooding - Jul 31, 2026