Socket Is Sponsoring Composer and Packagist
Socket sponsors Composer and Packagist to bolster PHP package infrastructure and defenses.
Summary
Socket has become a launch sponsor for Composer and Packagist's new sponsorship program, aimed at sustaining critical open-source infrastructure. This initiative addresses growing demands, increased supply chain attacks, and evolving compliance requirements. Socket's support will fund ongoing maintenance, emergency response, and the development of new supply chain defenses for the PHP ecosystem.
Full text
Research/Security NewsDistributed npm Package Cluster Delivers Cross-Platform RAT Targeting Alibaba DevelopersBenign-looking npm packages split malicious functionality across a dependency chain that deploys a cross-platform RAT targeting Alibaba developers.By Karlo Zanki - Jul 28, 2026