Picture

Socket @SocketSecurity

Socket helps developers use open source software and stay secure. Next-gen SCA and supply chain security. socket.dev node_modules/ Joined November 2021
  • Tweets
    1K
  • Followers
    4K
  • Following
    5K
  • Likes
    1K
SocketSecurity Profile Picture

Socket @SocketSecurity

10 hours ago

🚀 We're excited to introduce support for Single Sign-On (SSO) for our customers, supporting 20+ identity providers. socket.dev/blog/introduci…

SocketSecurity Profile Picture

Socket @SocketSecurity

3 days ago

Tea[.]xyz, a crypto project aimed at rewarding open source contributions, is once again facing backlash due to an influx of spam packages flooding public package registries. socket.dev/blog/tea-xyz-s…

SocketSecurity Profile Picture

Socket @SocketSecurity

5 days ago

Researchers claim to have created a GPT-4 agent that can autonomously exploit web vulnerabilities in real-world systems with an 87% success rate. We're not too far away from seeing fully autonomous exploits. socket.dev/blog/the-ai-ad…

SocketSecurity Profile Picture

Socket @SocketSecurity

6 days ago

UnitedHealth Group disclosed that the ransomware attack on Change Healthcare compromised protected health information for millions in the U.S., with estimated costs to the company expected to reach $1 billion. socket.dev/blog/unitedhea…

SocketSecurity Profile Picture

Socket @SocketSecurity

a week ago

GitHub is susceptible to a CDN flaw that allows attackers to host malware in the file storage for any public repository. socket.dev/blog/how-threa…

Socket retweeted
BSidesSF Profile Picture

BSidesSF @BSidesSF

a week ago

Thank you to @SocketSecurity for sponsoring our Presenter Appreciation Gifts for BSidesSF 2024! bsidessf.org/sponsors #bsidessf #bsidessf2024 #infosec

SocketSecurity Profile Picture

Socket @SocketSecurity

a week ago

There's still time to sign up for our webinar tomorrow! We're unpacking the xz-utils supply chain attack. We'll show you how this nightmare security incident unfolded and how you can secure your open source dependencies. Register for free: events.zoom.us/ev/ArQ1SnX063V…

SocketSecurity Profile Picture

Socket @SocketSecurity

2 weeks ago

Please join us for our next free webinar! We're unpacking the xz-utils supply chain attack on April 23rd. Learn how this nightmare security incident unfolded and how you can secure your open source dependencies from these types of attacks. Register now: events.zoom.us/ev/ArQ1SnX063V…

SocketSecurity Profile Picture

Socket @SocketSecurity

a week ago

What does a software supply chain attack look like? Check out @feross' talk at @NodeCongress on the Dark Side of Open Source. If you enjoy digging into examples of malicious code, this is a fun video! socket.dev/blog/the-dark-…

SocketSecurity Profile Picture

Socket @SocketSecurity

2 weeks ago

🚨 A Socket investigation has uncovered an npm package for a React components library that exfiltrates sensitive developer information, including your operating system username, Git username, and Git email. socket.dev/blog/npm-packa… #reactjs #extjs

Socket retweeted
WeAreDevs Profile Picture

WeAreDevelopers @WeAreDevs

2 weeks ago

Did you know you can watch episodes of Coffee with Developers on our 'Watch' page, YouTube and Vimeo? We've had some fascinating chats in recent weeks with @feross about the xz backdoor issue, and @dhh about the state of tech in 2024. Details in the next post 👇

SocketSecurity Profile Picture

Socket @SocketSecurity

2 weeks ago

OpenJS is warning of social engineering takeovers targeting open source projects after receiving a credible attempt on the foundation. The ecosystem is living on borrowed time until the next incident, which may already be in progress. socket.dev/blog/openjs-xz…

Socket retweeted
feross Profile Picture

Feross @feross

2 weeks ago

"I am seriously wondering how not every dev laptop is compromised these days" There’s likely way more backdoors than we realize. It’s not like the people (or state actor) behind xz-utils did nothing else for those ~2 years. They almost certainly infiltrated other projects.

StephanEwen Profile Picture

Stephan Ewen @StephanEwen

3 weeks ago

"I am seriously wondering how not every dev laptop is compromised these days" There’s likely way more backdoors than we realize. It’s not like the people (or state actor) behind xz-utils did nothing else for those ~2 years. They almost certainly infiltrated other projects.

SocketSecurity Profile Picture

Socket @SocketSecurity

2 weeks ago

Seeing a lot of stuff about JSON today! socket.dev/blog/judicious… still covers a lot of the nuance here and other things that people might recognize when already writing JSON. Defining which specific JSON scenarios are sanitized (and by what) might help clarify discussion today.…

SocketSecurity Profile Picture

Socket @SocketSecurity

2 weeks ago

Who is going to be at @RSAConference and @BSidesSF in May? We can’t wait to meet you! Join us at one of our events for good food, drinks, and chill times connecting with new people in the security industry: socket.dev/blog/connect-w…

Socket retweeted
WeAreDevs Profile Picture

WeAreDevelopers @WeAreDevs

2 weeks ago

In our most recent episode of Coffee with Developers we sat down with web security expert and Socket CEO, Feross Aboukhadijeh (@feross), to discuss the recent xz backdoor incident that rocked the open source world. Watch below 👇

Socket retweeted
kinngh Profile Picture

Harshdeep Singh Hura @kinngh

4 weeks ago

This is not the official package. All official packages start with @Shopify/** and this was community created. Also another reason to not blindly install npm packages just because it's easy

npm_malware Profile Picture

npm malware @npm_malware

4 weeks ago

This is not the official package. All official packages start with @Shopify/** and this was community created. Also another reason to not blindly install npm packages just because it's easy

Socket retweeted
feross Profile Picture

Feross @feross

2 weeks ago

I'm hosting a webinar on the xz-utils supply chain attack, and I'm going to show you how this nightmare security incident unfolded. Learn about the risks of open source supply chains and how to secure your code. Register now: events.zoom.us/ev/ArQ1SnX063V…

Trends for United States

Lakers
243 B posts
Jamal Murray
77,1 B posts
Lebron
142 B posts
Darvin Ham
50,6 B posts
Nuggets
115 B posts
Nuggets
115 B posts
Jokic
35 B posts
Hamilton Hall
34,3 B posts
Anthony Davis
12,4 B posts
Reaves
18,2 B posts
Vando
13,3 B posts
$SKR
834 B posts
Reggie Miller
3.540 posts
SUSTAINOVATIVE LIVING WITH APO
211 B posts
#WWERaw
154 B posts
#SiameseAssetxApoinCTW
243 B posts
Cancun
19,6 B posts
#NBAonTNT
1.703 posts
#Wordle1046
Dinwiddie
8.050 posts

You might like

⚡️ Founder + CEO @SocketSecurity (https://t.co/7g1opA8rgG) • 🌲 Visiting lecturer @Stanford (https://t.co/yw9prxLQAM) • ❤️ Open source @WebTorrentApp + @StandardJS
Feross
@feross
29K Followers
naam se xavier, kaam se saviour | DM for collaborations or 📩: xavierunclelite@gmail.com
Xavier Uncle
@xavierunclelite
235K Followers
🛠 Console Newsletter. A weekly email digest reviewing the best tools for developers. ✦ = Sponsored, but reviews are independent.
Console - Devtools, d..
@consoledotdev
2K Followers
Anti-ego ideas for anti-ergodic life. Founder, @smolmodels ▹ Listen: @latentspacepod ▹ Read: @coding_career ▹ Join: @aiDotengineer
swyx
@swyx
91K Followers
Syft is an open source tool to generate a Software Bill of Materials (SBOM) from a container image or filesystem. Created and maintained by @Anchore.
Syft
@SyftProject
820 Followers
Passionate community builder @MongoDB. Views are my own. #surfer #sober #sailor #tarot #mentalhealthadvocate 🏄‍♀️ ⛵ ♌ 🧘‍♀️👩‍🚒 🏳️‍🌈
Karissa Fuller
@Karissa_Wood_
4K Followers
Monitoring and debugging platform for cloud native applications
Lumigo
@Lumigo
2K Followers
Making memes, dreams, & software! CTO @brainstoryai, married to @ijoosong. Sign up for my newsletter for tech news, coding practice, jokes, + more! She/Her ✝️
Cassidy
@cassidoo
183K Followers
The safe source for open source. #softwaresecurity #cybersecurity
Chainguard ⛓️
@chainguard_dev
5K Followers
A semantic layer for building fast, consistent, and trusted analytics—and powering AI with context.
Cube
@the_cube_dev
2K Followers
A think-and-do-tank to foster research, tools & education within #privacy x web3 industry. EF grant recepient.
Web3Privacy Now
@web3privacy
2K Followers
building tech that enables humans to interact with latent spaces 🗺️ founder / cto @ https://t.co/NbsLHLWfy8 prev. ML Ph.D. Student at NYU Courant
AndriyMulyar
@andriy_mulyar
11K Followers
Faster, denser cloud compute - on Kubernetes and beyond, powered by WebAssembly. Creators of @Spinframework and co-creators of @SpinKube open source projects
Fermyon
@fermyontech
4K Followers
Marvellous code walkthroughs | https://t.co/YSGsh1eEwQ | GitHub: https://t.co/43a3CI6IN4 | Sponsors: https://t.co/SvUImm9mZm
Code Hike
@codehike_
1K Followers
Open Source Security Foundation (OpenSSF) https://t.co/uUpbn45dUo Together, we're securing the #opensource ecosystem #OSSsecurity https://t.co/adjLU8dJ9y
OpenSSF
@openssf
5K Followers