corpus.blog
54,302 blogs · [ { "id": "01a0de0a-d3fd-7124-806a-52e3497ea1a0", "title": "Socket Joins New OpenJS Program to Fund Node.js Security Work", "url": "https://socket.dev/blog/openjs-nodejs-security?utm_medium=feed", "published_at": "2026-09-25T20:59:05+00:00" }, { "id": "01a0de0a-d3fd-7124-806a-52e349e86465", "title": "Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud", "url": "https://socket.dev/blog/mini-shai-hulud-actions?utm_medium=feed", "published_at": "2026-09-24T21:14:48+00:00" }, { "id": "01a0d0f6-7eb8-721f-9461-ce1984e90b50", "title": "Malicious Firefox Extension Poses as PDF Identity Verifier to Hijack Google Accounts", "url": "https://socket.dev/blog/firefox-google-account-takeover?utm_medium=feed", "published_at": "2026-09-23T21:37:15+00:00" }, { "id": "01a0d0f6-7eb8-721f-9461-ce1985dd23bd", "title": "MemTensor npm and PyPI Packages Compromised in Credential-Stealing Supply Chain Attack", "url": "https://socket.dev/blog/memtensor-compromise?utm_medium=feed", "published_at": "2026-09-23T09:16:58+00:00" }, { "id": "01a0d0f6-7eb8-721f-9461-ce198690f590", "title": "Lovable’s OJ Rewrites Vite’s Dev Server in Rust as AI Lowers the Cost of Forking Open Source", "url": "https://socket.dev/blog/oj-vite-rust?utm_medium=feed", "published_at": "2026-09-22T05:48:11+00:00" }, { "id": "01a0d0f6-7eb8-721f-9461-ce19876333bc", "title": "Happy Birthday, Shai-Hulud", "url": "https://socket.dev/blog/happy-birthday-shai-hulud?utm_medium=feed", "published_at": "2026-09-18T18:46:45+00:00" }, { "id": "01a0d0f6-7eb8-721f-9461-ce1987735c7b", "title": "PolinRider Spreads Through Compromised GitHub Accounts and Packagist", "url": "https://socket.dev/blog/polinrider-github-packagist?utm_medium=feed", "published_at": "2026-09-17T15:33:22+00:00" }, { "id": "01a0d0f6-86ee-71b4-bc67-a533646d6864", "title": "Alert/event data older than 1 year will age out starting November 2026", "url": "https://socket.dev/changelog/alert-event-data-older-than-1-year-will-age-out-starting-november-2026?utm_medium=feed", "published_at": "2026-09-16T21:57:00+00:00" }, { "id": "01a0d0f6-7eb8-721f-9461-ce19878fd23d", "title": "GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk", "url": "https://socket.dev/blog/github-actions-cache-mode?utm_medium=feed", "published_at": "2026-09-16T19:36:23+00:00" }, { "id": "01a0d0f6-7eb8-721f-9461-ce19887b93a0", "title": "Jerod Santo Joins Socket as Head of Media", "url": "https://socket.dev/blog/jerod-santo-joins-socket?utm_medium=feed", "published_at": "2026-09-14T17:37:23+00:00" }, { "id": "01a09547-cbcf-7134-bd9e-438f9cd67ba5", "title": "Malicious Twitch Browser Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot Service", "url": "https://socket.dev/blog/malicious-twitch-browser-extension?utm_medium=feed", "published_at": "2026-09-11T14:23:33+00:00" }, { "id": "01a09547-cbcf-7134-bd9e-438f9d2d03c2", "title": "Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack", "url": "https://socket.dev/blog/claude-pypi-attack?utm_medium=feed", "published_at": "2026-09-10T22:05:04+00:00" }, { "id": "01a08ce9-fb82-70be-a846-32fff73598e4", "title": "Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data", "url": "https://socket.dev/blog/chrome-firefox-crypto-data-theft?utm_medium=feed", "published_at": "2026-09-09T21:40:24+00:00" }, { "id": "01a0d9a8-0619-7193-9863-675e306013bb", "title": "Cline CLI npm Package Compromised via Suspected Cache Poisoning Attack", "url": "https://socket.dev/blog/cline-cli-npm-package-compromised-via-suspected-cache-poisoning-attack", "published_at": "2026-09-08T00:00:00+00:00" }, { "id": "01a07df5-4275-71b1-8440-6cdd8cbaadde", "title": "GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing", "url": "https://socket.dev/blog/gpt-6-astra-cybersecurity?utm_medium=feed", "published_at": "2026-09-04T17:03:46+00:00" }, { "id": "01a07df5-4275-71b1-8440-6cdd8d46912d", "title": "Microsoft Teams Notifications Are Now Available in Socket", "url": "https://socket.dev/blog/microsoft-teams?utm_medium=feed", "published_at": "2026-09-01T18:45:02+00:00" }, { "id": "01a07df5-4275-71b1-8440-6cdd8df19e9c", "title": "pnpm 12’s Rust Rewrite Cuts Install Times by Up to 90%", "url": "https://socket.dev/blog/pnpm-12?utm_medium=feed", "published_at": "2026-09-01T02:52:00+00:00" }, { "id": "01a07df5-4275-71b1-8440-6cdd8e39d4d5", "title": "6 AppSec CTOs Debate Open Source Supply Chain Security at Black Hat", "url": "https://socket.dev/blog/oss-supplyl-chain-security-blackhat?utm_medium=feed", "published_at": "2026-08-31T20:31:58+00:00" }, { "id": "01a07df5-4275-71b1-8440-6cdd8f02f591", "title": "13 Malicious Packagist Themes Deliver iOS Spyware That Steals Crypto Wallet Seeds", "url": "https://socket.dev/blog/packagist-themes-ios-spyware?utm_medium=feed", "published_at": "2026-08-31T14:25:35+00:00" }, { "id": "01a07df5-4275-71b1-8440-6cdd8fd9adee", "title": "OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack", "url": "https://socket.dev/blog/openapi-react-query-codegen-npm-compromise?utm_medium=feed", "published_at": "2026-08-28T20:49:35+00:00" }, { "id": "01a07df5-4275-71b1-8440-6cdd9017b5a1", "title": "When Autonomous Agents Escape: Why Socket Signed the Cyber Defense Open Letter", "url": "https://socket.dev/blog/autonomous-agents-escape?utm_medium=feed", "published_at": "2026-08-28T16:02:57+00:00" }, { "id": "01a07df5-4275-71b1-8440-6cdd907bfc6d", "title": "Socket Now Protects the Microsoft Edge Extension Ecosystem", "url": "https://socket.dev/blog/edge-extension-security?utm_medium=feed", "published_at": "2026-08-28T13:22:10+00:00" }, { "id": "01a07df5-4275-71b1-8440-6cdd908d8e27", "title": "19 Chrome and Edge Extensions Deliver a Wallet Drainer and Credential-Stealing Payloads", "url": "https://socket.dev/blog/chrome-edge-extension-wallet-drainer?utm_medium=feed", "published_at": "2026-08-27T16:01:21+00:00" }, { "id": "01a07df5-4275-71b1-8440-6cdd9151b1be", "title": "Socket for ClickUp Is Now Available", "url": "https://socket.dev/blog/socket-for-clickup?utm_medium=feed", "published_at": "2026-08-26T19:11:06+00:00" }, { "id": "01a07df5-4275-71b1-8440-6cdd91de81e0", "title": "New: Asana integration for alert ticketing", "url": "https://socket.dev/changelog/asana-integration?utm_medium=feed", "published_at": "2026-08-25T20:24:59+00:00" }, { "id": "01a07df5-4275-71b1-8440-6cdd91e28ec9", "title": "PHP and Composer support is now in beta", "url": "https://socket.dev/changelog/php-and-composer-support-beta?utm_medium=feed", "published_at": "2026-08-21T20:35:00+00:00" }, { "id": "01a07df5-4275-71b1-8440-6cdd92bc0e98", "title": "New: Firefox extension protection", "url": "https://socket.dev/changelog/firefox-extension-protection?utm_medium=feed", "published_at": "2026-08-20T20:42:00+00:00" }, { "id": "01a07df5-4275-71b1-8440-6cdd92c189f1", "title": "Socket Now Scans Yanked crates.io Versions Pinned in Cargo.lock", "url": "https://socket.dev/changelog/socket-now-scans-yanked-crates-io-versions-pinned-in-cargo-lock?utm_medium=feed", "published_at": "2026-07-10T03:12:07+00:00" }, { "id": "01a07df5-4275-71b1-8440-6cdd933002d8", "title": "Repository-Scoped API Tokens Now Support Reachability Scans", "url": "https://socket.dev/changelog/repository-scoped-api-tokens-now-support-reachability-scans?utm_medium=feed", "published_at": "2026-07-09T03:23:00+00:00" }, { "id": "01a07df5-4275-71b1-8440-6cdd936cd067", "title": "Packagist Package Pages Now Surface Force-Pushed Tags", "url": "https://socket.dev/changelog/packagist-package-pages-now-surface-force-pushed-tags?utm_medium=feed", "published_at": "2026-07-06T04:03:00+00:00" }, { "id": "01a07df5-4275-71b1-8440-6cdd93aedbb6", "title": "Fix: Full Scan Metadata Now Matches the API Contract", "url": "https://socket.dev/changelog/fix-full-scan-metadata-now-matches-the-api-contract?utm_medium=feed", "published_at": "2026-07-03T03:50:00+00:00" }, { "id": "01a07df5-4275-71b1-8440-6cdd9452859c", "title": "Private Package Scores Now Display as N/A", "url": "https://socket.dev/changelog/private-package-scores-now-display-as-n-a?utm_medium=feed", "published_at": "2026-07-03T03:45:00+00:00" }, { "id": "01a07df5-4275-71b1-8440-6cdd9466f2db", "title": "Fix: Pull Request Pages No Longer Break After Renaming a Workspace", "url": "https://socket.dev/changelog/fix-pull-request-pages-no-longer-break-after-renaming-a-workspace?utm_medium=feed", "published_at": "2026-07-02T03:28:00+00:00" }, { "id": "01a07df5-4275-71b1-8440-6cdd9564b137", "title": "New: AI-Reviewed Reachability Specifications", "url": "https://socket.dev/changelog/ai-reviewed-reachability-specifications?utm_medium=feed", "published_at": "2026-06-30T02:47:00+00:00" }, { "id": "01a0876e-9ac1-70c3-8b77-7406d3c3435c", "title": "AI Agent Lands PRs in Major OSS Projects, Targets Maintainer...", "url": "https://socket.dev/blog/ai-agent-lands-prs-in-major-oss-projects-targets-maintainers-via-cold-outreach", "published_at": "2026-02-17T06:22:18+00:00" } ] posts Claim your blog
Back to Socket Engineering
Blog · corpus.blog/blogs/socket.dev/posts

Socket Engineering

socket.dev

2026

Socket Joins New OpenJS Program to Fund Node.js Security Workoriginal ↗
25 Sept 2026
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Huludoriginal ↗
24 Sept 2026
Malicious Firefox Extension Poses as PDF Identity Verifier to Hijack Google Accountsoriginal ↗
23 Sept 2026
MemTensor npm and PyPI Packages Compromised in Credential-Stealing Supply Chain Attackoriginal ↗
23 Sept 2026
Lovable’s OJ Rewrites Vite’s Dev Server in Rust as AI Lowers the Cost of Forking Open Sourceoriginal ↗
22 Sept 2026
Happy Birthday, Shai-Huludoriginal ↗
18 Sept 2026
PolinRider Spreads Through Compromised GitHub Accounts and Packagistoriginal ↗
17 Sept 2026
Alert/event data older than 1 year will age out starting November 2026original ↗
16 Sept 2026
GitHub Actions Adds cache-mode to Limit Cache Poisoning Riskoriginal ↗
16 Sept 2026
Jerod Santo Joins Socket as Head of Mediaoriginal ↗
14 Sept 2026
Malicious Twitch Browser Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot Serviceoriginal ↗
11 Sept 2026
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attackoriginal ↗
10 Sept 2026
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Dataoriginal ↗
9 Sept 2026
Cline CLI npm Package Compromised via Suspected Cache Poisoning Attackoriginal ↗
8 Sept 2026
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testingoriginal ↗
4 Sept 2026
Microsoft Teams Notifications Are Now Available in Socketoriginal ↗
1 Sept 2026
pnpm 12’s Rust Rewrite Cuts Install Times by Up to 90%original ↗
1 Sept 2026
6 AppSec CTOs Debate Open Source Supply Chain Security at Black Hatoriginal ↗
31 Aug 2026
13 Malicious Packagist Themes Deliver iOS Spyware That Steals Crypto Wallet Seedsoriginal ↗
31 Aug 2026
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attackoriginal ↗
28 Aug 2026
When Autonomous Agents Escape: Why Socket Signed the Cyber Defense Open Letteroriginal ↗
28 Aug 2026
Socket Now Protects the Microsoft Edge Extension Ecosystemoriginal ↗
28 Aug 2026
19 Chrome and Edge Extensions Deliver a Wallet Drainer and Credential-Stealing Payloadsoriginal ↗
27 Aug 2026
Socket for ClickUp Is Now Availableoriginal ↗
26 Aug 2026
New: Asana integration for alert ticketingoriginal ↗
25 Aug 2026
PHP and Composer support is now in betaoriginal ↗
21 Aug 2026
New: Firefox extension protectionoriginal ↗
20 Aug 2026
Socket Now Scans Yanked crates.io Versions Pinned in Cargo.lockoriginal ↗
10 Jul 2026
Repository-Scoped API Tokens Now Support Reachability Scansoriginal ↗
9 Jul 2026
Packagist Package Pages Now Surface Force-Pushed Tagsoriginal ↗
6 Jul 2026
Fix: Full Scan Metadata Now Matches the API Contractoriginal ↗
3 Jul 2026
Private Package Scores Now Display as N/Aoriginal ↗
3 Jul 2026
Fix: Pull Request Pages No Longer Break After Renaming a Workspaceoriginal ↗
2 Jul 2026
New: AI-Reviewed Reachability Specificationsoriginal ↗
30 Jun 2026
AI Agent Lands PRs in Major OSS Projects, Targets Maintainer...original ↗
17 Feb 2026