Socket @SocketSecurity

Socket is the #1 software supply chain security platform. Next-gen SCA + SBOM + 0-day prevention. LOVED BY DEVELOPERS. 👀 @npm_malware socket.dev https://socket.dev/careers Joined November 2021

Tweets

2K
Followers

4K
Following

5K
Likes

1K

Socket @SocketSecurity

6 hours ago

🔥 Python's uv has inspired rv for #Ruby: installs precompiled Ruby 3.4.x in ~0.22s and combines version + dependency management in a single Rust-powered tool. socket.dev/blog/rv-is-a-n… @shortrubynews

0 0 1 103 1

Socket @SocketSecurity

a week ago

🚨 Socket’s Threat Research Team found a malicious npm package impersonating Nodemailer. It modifies Windows #crypto wallets to redirect transactions to attacker-controlled addresses. socket.dev/blog/wallet-dr… #nodejs #javascript

0 1 2 298 0

Gotham Sharma @GothamJSharma

2 days ago

Nx Investigation Reveals GitHub Actions Workflow Exploit Led to NPM Token Theft: socket.dev/blog/nx-supply… #infosec #cybersecurity #tech #AI @GothamJSharma @accesscyberorg via @SocketSecurity

0 2 3 177 0

Socket @SocketSecurity

2 days ago

The Nx team’s investigation into last week’s supply chain attack found the compromise came from a GitHub Actions workflow injection on an outdated branch, exposing the npm token & enabling malicious publishes. All Nx packages now use Trusted Publishing. socket.dev/blog/nx-supply…

0 3 11 2K 0

Socket @SocketSecurity

3 days ago

🤖 Developers are rallying around AGENTS.md, a fast-emerging standard for giving instructions to AI coding agents. Already adopted in 20k+ repos and now supported by GitHub Copilot. Read more: socket.dev/blog/agents-md…

0 3 1 520 1

Jeff Cross @jeffbcross

a week ago

Reminder if you might have been affected, rotate all tokens IMMEDIATELY, especially the GitHub CLI Authorized OAuth, which isn't as straightforward. Our team is here to help via the community discord or [email protected].

Darcy Clarke @darcy

a week ago

1 4 8 5K 2

1 5 20 4K 3

Socket @SocketSecurity

a week ago

Scanners overwhelm teams with CVE alerts but most aren’t exploitable. On the @riskybusiness podcast, @feross explains how reachability analysis cuts 90% of the noise. This episode is a deep dive into one of the hardest problems in vulnerability management. socket.dev/blog/risky-biz…

0 1 1 934 0

Darcy Clarke @darcy

a week ago

🚨 If you think you might be effected by the nx compromise please revoke the GitHub CLI Authorized OAuth App: github.com/settings/conne… Notably, this is the only way to revoke/rotate the tokens made by/known to that app. The next time you `gh login` you can reauth.

1 4 8 5K 2

Sarah Gooding @pollyplummer

a week ago

Attackers are now experimenting with weaponizing AI developer tools to accelerate reconnaissance and data theft. By expressing goals in prompts, they skip writing custom code and tap into cross-platform expertise instantly, cutting development time for supply chain attacks.

Socket @SocketSecurity

a week ago

0 3 9 3K 2

1 1 2 531 0

SC Media @SCMagazine

a week ago

.@SocketSecurity discovered a malicious Go module that poses as a fast SSH brute forcer, but covertly exfiltrates credentials to its source. #cybersecurity #infosec #ITsecurity bit.ly/47g0j3c

0 2 2 1K 0

Socket @SocketSecurity

a week ago

🚨 Supply chain attack on Nx npm packages (4.6M weekly downloads) Malware abused AI CLI tools (Claude, Gemini, Q) to steal creds + wallets, then exfiltrated to GitHub repos (s1ngularity-repository*). More than 1,000 victim accounts confirmed. 🔗 socket.dev/blog/nx-packag… #nodejs

0 3 9 3K 2

Socket @SocketSecurity

2 weeks ago

📢 CISA’s 2025 SBOM guidance moves beyond simple software inventories, adding hashes, licenses, tool metadata & context to make SBOMs operationally actionable. Public comment is open until Oct 3. Read more: socket.dev/blog/cisa-2025… @CISAgov @CISACyber

0 1 1 866 1

CloudSecList @CloudSecList

2 weeks ago

📖 CloudSecList Issue 302 just got released, w/ content from @PalantirTech @SocketSecurity @datadoghq and more! cloudseclist.com/issues/issue-3…

0 3 9 1K 2

The Hacker News @TheHackersNews

2 weeks ago

⚠️ A “hacking tool” on Go isn’t what it seems. The package pretends to brute-force SSH—but secretly sends stolen logins to a Telegram bot controlled by a Russian actor. The package is still on pkg.go.dev. Full report → thehackernews.com/2025/08/malici…

10 68 192 90K 67

Socket @SocketSecurity

2 weeks ago

💎 Follow-up and clarification on our recent research into the malicious #Ruby gems campaign: socket.dev/blog/follow-up…

0 2 5 830 0

Socket @SocketSecurity

2 weeks ago

ESLint is about to ship parallel linting, closing a 10-year-old feature request. 🚀 Benchmarks show 30–60% faster runs, with some projects seeing 3x+ improvements. Our write-up on the shifting linter landscape: socket.dev/blog/eslint-ad… @geteslint

0 6 11 3K 0

CyberInsider @CyberInsidercom

2 weeks ago

Zero-Day Clickjacking Flaws Found in Password Managers Used by Millions #zeroday #clickjacking #PasswordManager cyberinsider.com/zero-day-click…

2 5 14 1K 0

Socket @SocketSecurity

2 weeks ago

🚨 A malicious Go module, disguised as an SSH brute-forcing tool, is sending stolen SSH logins to a hardcoded Telegram bot that is still active. Full analysis: socket.dev/blog/malicious… #GoLang