[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"vendor:socket":3},{"vendor":4,"products":15,"links":23,"research":28,"news":81,"iocs":84,"iocs_total":82,"activity":85},{"slug":5,"name":6,"domain":7,"website_url":8,"hq_country":9,"description":10,"logo_path":11,"brand_color":12,"pitch":13,"pitch_source_url":8,"updated_at":14},"socket","Socket","socket.dev","https:\u002F\u002Fsocket.dev\u002F","US","Software supply chain security company that detects malicious open-source packages. Its research team reports new malicious packages.","\u002Fvendor-logos\u002Fsocket.png","#d81ac6","Socket fights vulnerabilities and provides visibility, defense-in-depth, and proactive supply chain protection for JavaScript, Python, and Go dependencies.","2026-10-16T13:44:14.63463+00:00",[16],{"slug":5,"name":6,"url":8,"description":17,"pitch":13,"pitch_source_url":8,"controls":18},"Detects and blocks malicious and risky packages in npm, PyPI and other ecosystems.",[19],{"slug":20,"name":21,"problem":22},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[24],{"kind":25,"label":26,"url":27},"research","Socket blog","https:\u002F\u002Fsocket.dev\u002Fblog",{"total":29,"stories":30},126,[31,36,41,46,51,56,61,66,71,76],{"slug":32,"title":33,"published_at":34,"brief":35},"agent-baseline-publishes-security-reference-architecture-for-software-factories-68c07d","Agent Baseline Publishes Security Reference Architecture for Software Factories","2026-10-13T17:54:48.146+00:00","Agent Baseline releases reference architecture for securing AI-driven software factories.",{"slug":37,"title":38,"published_at":39,"brief":40},"credential-stealing-github-actions-workflows-planted-in-tens-of-thousands-of-rep-bf8959","Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories","2026-10-09T19:14:28+00:00","GhostAction campaign compromises GitHub accounts to inject malicious workflows into repositories.",{"slug":42,"title":43,"published_at":44,"brief":45},"new-ghostaction-wave-hits-hundreds-of-repos-expanding-beyond-ci-cd-secrets-to-cl-63e4c5","New GhostAction Wave Hits Hundreds of Repos, Expanding Beyond CI\u002FCD Secrets to Cloud Credentials","2026-10-09T12:07:00.455+00:00","GhostAction campaign expands to steal cloud credentials from Git history and working tree.",{"slug":47,"title":48,"published_at":49,"brief":50},"threatsday-ransomware-affiliate-betrayal-whatsapp-rat-exposed-hacker-tools-and-1-d4fcba","ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories","2026-10-08T17:58:02+00:00","Multiple threats emerge: malicious VS Code extensions, a new Windows RAT via WhatsApp, and exposed hacker tools.",{"slug":52,"title":53,"published_at":54,"brief":55},"16-malicious-firefox-extensions-pose-as-rabby-and-okx-wallets-to-steal-recovery--0a0a43","16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases","2026-10-08T09:46:32+00:00","16 malicious Firefox extensions impersonate crypto wallets to steal recovery phrases.",{"slug":57,"title":58,"published_at":59,"brief":60},"tensorlake-npm-package-compromised-to-deliver-shai-hulud-credential-stealing-wor-a94793","Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm","2026-10-08T05:46:20+00:00","Tensorlake npm package compromised to deliver Shai-Hulud credential-stealing worm.",{"slug":62,"title":63,"published_at":64,"brief":65},"introducing-socket-scanning-for-vs-code-marketplace-extensions-6e30bc","Introducing Socket Scanning for VS Code Marketplace Extensions","2026-10-06T19:07:23.184+00:00","Socket launches experimental scanning for VS Code Marketplace extensions to detect malicious code.",{"slug":67,"title":68,"published_at":69,"brief":70},"pretty-themes-hidden-loaders-glassworm-linked-extensions-span-vs-code-marketplac-da2231","Pretty Themes, Hidden Loaders: GlassWorm-Linked Extensions Span VS Code Marketplace and Open VSX","2026-10-02T03:44:40.584+00:00","GlassWorm-linked VS Code extensions found on marketplaces contain malware loaders.",{"slug":72,"title":73,"published_at":74,"brief":75},"github-actions-re-enabled-with-mini-shai-hulud-payload-still-active-fa5c03","GitHub Actions re-enabled with Mini Shai-Hulud payload still active","2026-09-26T14:19:46+00:00","Compromised GitHub Actions re-enabled with active malware payload for over a week.",{"slug":77,"title":78,"published_at":79,"brief":80},"malicious-firefox-extension-poses-as-pdf-identity-verifier-to-hijack-google-acco-06f42a","Malicious Firefox Extension Poses as PDF Identity Verifier to Hijack Google Accounts","2026-09-23T21:37:15.973+00:00","Firefox extension hijacks Google accounts by stealing session cookies and passwords.",{"total":82,"stories":83},0,[],[],[86,89,92,95,98,101],{"month":87,"reported":88,"affected":82},"2026-05-01",22,{"month":90,"reported":91,"affected":82},"2026-06-01",15,{"month":93,"reported":94,"affected":82},"2026-07-01",21,{"month":96,"reported":97,"affected":82},"2026-08-01",19,{"month":99,"reported":100,"affected":82},"2026-09-01",9,{"month":102,"reported":103,"affected":82},"2026-10-01",10]