Socket fights vulnerabilities and provides visibility, defense-in-depth, and proactive supply chain protection for JavaScript, Python, and Go dependencies.
Our summarySoftware supply chain security company that detects malicious open-source packages. Its research team reports new malicious packages.
“Socket fights vulnerabilities and provides visibility, defense-in-depth, and proactive supply chain protection for JavaScript, Python, and Go dependencies.”
Detects and blocks malicious and risky packages in npm, PyPI and other ecosystems.
Product pageStories in our coverage based on what researchers at Socket found or reported: 126 in total.
Agent Baseline releases reference architecture for securing AI-driven software factories.
GhostAction campaign compromises GitHub accounts to inject malicious workflows into repositories.
GhostAction campaign expands to steal cloud credentials from Git history and working tree.
Multiple threats emerge: malicious VS Code extensions, a new Windows RAT via WhatsApp, and exposed hacker tools.
16 malicious Firefox extensions impersonate crypto wallets to steal recovery phrases.
Tensorlake npm package compromised to deliver Shai-Hulud credential-stealing worm.
Socket launches experimental scanning for VS Code Marketplace extensions to detect malicious code.
GlassWorm-linked VS Code extensions found on marketplaces contain malware loaders.
Compromised GitHub Actions re-enabled with active malware payload for over a week.
Firefox extension hijacks Google accounts by stealing session cookies and passwords.
Stories where a Socket product had a vulnerability or was attacked, or Socket itself was. Useful if you run its products.
None in our coverage yet.
Get an email when a reviewed story names Socket, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Tell us what to fix on this page: a product, a description, a link or a review. We check every suggestion before changing anything, and listing stays free and editorial.
