| 1. | | Searchjacked: Browser Extensions Hijack Searches for 13M Users (socket.dev) |
| 1 point by wondersky 1 day ago | past | discuss |
|
| 2. | | LiteLLM Compromised to Steal Cloud and AI Credentials (socket.dev) |
| 3 points by pranshuchittora 10 days ago | past | discuss |
|
| 3. | | Two compromised GitHub Actions have been reenabled (socket.dev) |
| 3 points by justsomehuman 36 days ago | past | 1 comment |
|
| 4. | | Firefox Extension Poses as PDF Identity Verifier to Hijack Google Accounts (socket.dev) |
| 3 points by speckx 37 days ago | past |
|
| 5. | | MemTensor NPM and PyPI packages compromised with credential stealer (socket.dev) |
| 2 points by joshcsimmons 37 days ago | past |
|
| 6. | | Popular Rust Crates Compromised in Build-Time Supply Chain Attack (socket.dev) |
| 9 points by dabinat 70 days ago | past | 2 comments |
|
| 7. | | Firefox Extensions Linked to Crypto Wallet and Credential Theft (socket.dev) |
| 2 points by speckx 72 days ago | past |
|
| 8. | | Malicious Chrome VPN Extensions Discovered That Do Traffic Redirection (socket.dev) |
| 2 points by feross 80 days ago | past |
|
| 9. | | npm RAT Targets Alibaba (socket.dev) |
| 1 point by Georgelemental 81 days ago | past |
|
| 10. | | Mythos Attempted to Social Engineer Open Source Maintainer to Merge Malware (socket.dev) |
| 62 points by bhavansig 85 days ago | past | 39 comments |
|
| 11. | | NPM Packages in the Keyv and Cacheable Namespaces Compromised (socket.dev) |
| 5 points by tilt 88 days ago | past | 1 comment |
|
| 12. | | Socket.dev warns about Rust Tokio library obfuscation (socket.dev) |
| 6 points by cwaffles 88 days ago | past | 1 comment |
|
| 13. | | 140+ Mastra npm Packages Compromised in Coordinated Supply Chain Attack (socket.dev) |
| 3 points by crashpn 3 months ago | past |
|
| 14. | | NPM v12 Ships with Install Scripts Off by Default, Deprecating 2FA-Bypass Tokens (socket.dev) |
| 2 points by nreece 3 months ago | past |
|
| 15. | | Supply Chain Attack Campaign PolinRider (socket.dev) |
| 2 points by _____k 3 months ago | past |
|
| 16. | | Rolldown drops Rust React Compiler over a 17% binary-size increase (socket.dev) |
| 1 point by logickkk1 4 months ago | past |
|
| 17. | | Socket Firewall (socket.dev) |
| 1 point by ilreb 4 months ago | past |
|
| 18. | | Mini Shai-Hulud, Miasma, and Hades Worms Target Bioinformati (socket.dev) |
| 2 points by rbanffy 4 months ago | past |
|
| 19. | | Malicious PyPI Wheels Target Bioinformatics and MCP Developers (socket.dev) |
| 2 points by fbuilesv 4 months ago | past | 1 comment |
|
| 20. | | TrapDoor Crypto Stealer Supply Chain Across NPM, PyPI, and Crates.io (socket.dev) |
| 2 points by a-french-anon 5 months ago | past | 1 comment |
|
| 21. | | New supply chain attack on 34 packages, 100+ versions on NPM, PyPI and crates.io (socket.dev) |
| 2 points by aghuang 5 months ago | past |
|
| 22. | | AI Has Taken over Open Source (socket.dev) |
| 3 points by ChicknNuggt 5 months ago | past | 1 comment |
|
| 23. | | TrapDoor supply chain attack hits PyPI, NPM, and crates.io (socket.dev) |
| 2 points by rvz 5 months ago | past |
|
| 24. | | Laravel Lang Compromised with RCE Backdoor Across 700 Versions (socket.dev) |
| 9 points by csmantle 5 months ago | past | 1 comment |
|
| 25. | | Laravel Lang Compromised with RCE Backdoor Across 700 Versions (socket.dev) |
| 4 points by gpi 5 months ago | past |
|
| 26. | | Malicious Postinstall Hook Found in 700 GitHub Repos, Including Node Projects (socket.dev) |
| 18 points by 882542F3884314B 5 months ago | past | 4 comments |
|
| 27. | | Socket raises $60M Series C at $1B valuation (socket.dev) |
| 3 points by slymax 5 months ago | past |
|
| 28. | | Active Supply Chain Attack Compromises Antv Packages on NPM (socket.dev) |
| 4 points by 882542F3884314B 5 months ago | past |
|
| 29. | | Popular node-ipc NPM Package Infected with Credential Stealer (socket.dev) |
| 3 points by csmantle 5 months ago | past |
|
| 30. | | Fsnotify Maintainer Dispute Sparks Supply Chain Concerns (socket.dev) |
| 1 point by elashri 5 months ago | past |
|
|
| More |
