AWS Security Hub Adds Socket for Supply Chain Security
AWS Security Hub now offers Socket for supply chain security, catching malicious open source packages.
Run Amazon Web Services?
Get an email when a reviewed story names Amazon Web Services, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
AWS Security Hub's Extended plan now includes Socket, a tool focused on supply chain security, particularly for detecting malicious open source packages. Socket uses behavioral analysis to identify threats that signature-based tools might miss across various package ecosystems like npm, PyPI, and Maven. This integration allows AWS customers to procure Socket through their existing AWS spend, with consolidated billing and a free first month.
Full text
Security News/Company NewsSocket Is Sponsoring Composer and PackagistSocket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.By Sarah Gooding - Jul 31, 2026