Socket

@SocketSecurity

Socket is the #1 software supply chain security platform. Next-gen SCA + SBOM + 0-day prevention. LOVED BY DEVELOPERS. 👀 @npm_malware

https://socket.dev/careers

socket.dev

الردود المنشورات المُعاد نشرها الوسائط

مُثبّت
Socket
@SocketSecurity
22 مايو
Today is a big day for Socket.
Feross
@feross
20 مايو
Today is a big day for @SocketSecurity. We just raised a $60M Series C at a $1B valuation, led by @ThriveCapital with participation from @a16z, @AbstractVC, and @CapitalOne Ventures. Total funding is now $125M. Four years ago, we started Socket because open source dependencies
4
Socket
@SocketSecurity
1h
We’re tracking more North Korea-linked PolinRider activity across GitHub and Packagist. New findings: 4 malicious dev versions, rewritten Git history, and obfuscated JavaScript planted in index.php and executed through PHP’s shell_exec() function.
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
من socket.dev
Socket
@SocketSecurity
22h
GitHub added cache-mode to GitHub Actions, a new control that limits cache access at the workflow or job level to reduce cache poisoning, the technique behind several recent high-profile supply chain attacks on npm and PyPI.
GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
من socket.dev
3
Socket
@SocketSecurity
14 سبتمبر
🎉 We're excited to welcome @jerodsanto to Socket as our first Head of Media. After more than a decade as one of the most trusted voices in developer media, he's setting his sights on supply chain security. Find out what he's cooking up at Socket.
Jerod Santo Joins Socket as Head of Media
من socket.dev
Socket
@SocketSecurity
11 سبتمبر
Socket researchers found a malicious Twitch browser extension on Chrome and Firefox with 30,000+ reported users. It forwards full account-scoped OAuth tokens to a Russian bot service, exposing chat, whispers, and account settings.
Malicious Twitch Browser Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot Service
من socket.dev
2