Socket (@SocketSecurity) / X

Socket

3,136 posts

Socket

@SocketSecurity

Socket is the #1 software supply chain security platform. Next-gen SCA + SBOM + 0-day prevention. LOVED BY DEVELOPERS. 👀 @npm_malware

https://socket.dev/careers

Joined November 2021

Pinned
Socket
@SocketSecurity
May 22
Today is a big day for Socket.
Feross
@feross
May 20
Today is a big day for @SocketSecurity. We just raised a $60M Series C at a $1B valuation, led by @ThriveCapital with participation from @a16z, @AbstractVC, and @CapitalOne Ventures. Total funding is now $125M. Four years ago, we started Socket because open source dependencies
24K
Socket reposted
Socket
@SocketSecurity
Jun 13
‼️ Treat coding assessments like untrusted code. Fake hiring pipelines are now a malware delivery channel.
Mark Odayan
@markodayan
Jun 12
Received a suspicious coding assessment for a crypto company I had zero mutual followers with (yet they had 100K+ followers on twitter), I just checked the package.json and found this dependency lol (thank you @SocketSecurity)
9.4K
Socket reposted
CloudSecList
@CloudSecList
14h
📖 CloudSecList Issue 342 is live, with content from @CorgeaInc @CloudNativeFdn @SpecterOps @datadoghq @SocketSecurity and more!
cloudseclist.com
📖 [The CloudSecList] Issue 342
Issue 342 of CloudSecList
1.2K
Socket reposted
Socket
@SocketSecurity
Jun 12
🧩 New Research: 152 Chrome "live wallpaper" extensions hid ad tracking behind false privacy disclosures and faked Google search traffic to support ad monetization. The network spanned 38 publisher accounts, 3 backend brands, and ~105K installs.
152 Chrome Live Wallpaper Extensions Hid Ad Tracking and Fak...
From socket.dev
2.9K
Socket reposted
Socket
@SocketSecurity
Jun 13
The US government forced Anthropic to pull Claude Fable on Friday night, days after launch. Users spent the week one-shotting code reviews and migrations. Some upgraded specifically for Fable. Now they’re demanding refunds. Government intervention can now reach directly into a
US Government Forces Anthropic to Pull Claude Fable Days Aft...
From socket.dev
27K
Socket
@SocketSecurity
Jun 13
The US government forced Anthropic to pull Claude Fable on Friday night, days after launch. Users spent the week one-shotting code reviews and migrations. Some upgraded specifically for Fable. Now they’re demanding refunds. Government intervention can now reach directly into a
US Government Forces Anthropic to Pull Claude Fable Days Aft...
From socket.dev
27K
Socket reposted
Feross
@feross
Jun 11
. @andrewbecherer is joining @SocketSecurity as our first Chief Information Security Officer. Andrew was @datadoghq's first security hire and led its security program through hypergrowth and IPO. He went on to serve as CISO at @Iterable, founded @StarisHQ to work on security for
Andrew Becherer Joins Socket as Chief Information Security O...
From socket.dev
3.1K
Socket
@SocketSecurity
Jun 13
‼️ Treat coding assessments like untrusted code. Fake hiring pipelines are now a malware delivery channel.
Mark Odayan
@markodayan
Jun 12
Received a suspicious coding assessment for a crypto company I had zero mutual followers with (yet they had 100K+ followers on twitter), I just checked the package.json and found this dependency lol (thank you @SocketSecurity)
9.4K
Socket reposted
SC Media
@SCMagazine
Jun 12
A new Mini Shai-Hulud “Hades” variant has infected 23 PyPI package versions, targeting developers with malware designed to steal tokens, keys and cloud credentials, according to @SocketSecurity. #cybersecurity #CISO #infosec
Mini Shai-Hulud ‘Hades’ variant affects 23 PyPI package versions
From scworld.com
2.3K
Socket
@SocketSecurity
Jun 12
🧩 New Research: 152 Chrome "live wallpaper" extensions hid ad tracking behind false privacy disclosures and faked Google search traffic to support ad monetization. The network spanned 38 publisher accounts, 3 backend brands, and ~105K installs.
152 Chrome Live Wallpaper Extensions Hid Ad Tracking and Fak...
From socket.dev
2.9K
Socket
@SocketSecurity
Jun 11
Big news for Socket: @andrewbecherer is joining as our first CISO. He brings deep experience leading security at high-growth SaaS companies, and will strengthen the security program behind the infrastructure we operate and the OSS ecosystem we protect.
Andrew Becherer Joins Socket as Chief Information Security O...
From socket.dev
2.2K
Socket reposted
John Scott-Railton
@jsrailton
Jun 10
NEW: malware developers added nuclear & biological weapons text to to their spyware. Goal? To trigger LLM safety refusals... so that their spyware wouldn't be analyzed by an AI security scanner. Cleanest practical example I can think of for why over-indexing on first order
1.5M
Socket reposted
Askraa.ai
@askraaai
Jun 11
A notable update for @Replit users: @SocketSecurity Firewall is now integrated directly into the development experience and is already stopping more than 8,000 malicious packages every day before they can be installed. #Replit #CyberSecurity #Askraa
Socket
@SocketSecurity
Jun 10
🔥 Socket Firewall is now built into @Replit's AI-powered development experience. It’s already blocking 8K malicious packages/day across builders on the platform, giving Replit users stronger protection by default the moment dependencies are introduced. socket.dev/blog/socket-pa…
2.5K