Socket Headlines

Cybernoz

Socket is among the security firms that reported on the compromise of 145 Mastra npm packages via a hijacked contributor account.

Companies:Socket

Cybernoz

Socket Research Team uncovered a large-scale supply chain attack on Mastra npm packages using typosquatting dependency easy-day-js.

Companies:Socket

InfoSec Today

Socket contributed to the discovery of a supply chain attack compromising 144 Mastra npm packages via the easy-day-js typosquatting dependency.

Companies:MastraSocket

Data Today

Data Today's live coverage of the Miasma worm includes multiple references to Socket's research, campaign tracker, and detection of the PyPI wave.

Companies:SafeDepSocket

developer-tech.com

Replit integrates Socket Firewall into its IDE to block malicious packages in real time during AI-assisted development.

Companies:Socket

Digg

Replit partnered with Socket to launch a Package Firewall that blocks malicious packages before they reach apps.

Companies:Socket

Phoenix Security

Phoenix Security analyzes the Miasma campaign, referencing Socket's discovery of 37 malicious PyPI wheels and the broader campaign tracking.

Companies:Socket

SecurityWeek

SecurityWeek reports on the Miasma/Hades supply-chain campaign, citing Socket's research and campaign tracker documenting over 100 affected packages.

Companies:Socket

HackWire

Article republishing BleepingComputer's report on Socket's discovery of Shai-Hulud attack on PyPI packages.

Companies:Socket

BleepingComputer

BleepingComputer reports on a Shai-Hulud supply-chain attack discovered by Socket, which identified 37 malicious PyPI packages using .pth startup hooks.

Companies:Socket

Safeguard.sh Blog

Safeguard.sh analyzes the TrapDoor attack, referencing Socket's disclosure and detection methods.

Companies:Socket

SecurityBrief

Socket raises $60M Series C at $1B valuation led by Thrive Capital to secure software supply chains.

Companies:Socket

ForkLog

Socket reports a supply chain attack targeting crypto and AI developers.

Companies:Socket

Menlo Times

Socket raises $60M and expands security platform to protect AI-driven development from supply chain attacks.

Companies:Socket

Crypto Economy

Crypto Economy reports on Socket's detection of 34 malicious packages in a campaign targeting crypto ecosystems.

Companies:Socket

Glitchwire

Glitchwire covers Socket's disclosure of the TrapDoor campaign, which steals credentials across multiple package registries.

Companies:Socket

Ventureburn

Ventureburn reports on Socket's $60M Series C funding to enhance AI security and supply chain protection.

Companies:Socket

SiliconANGLE

SiliconANGLE reports Socket's $60M Series C funding at $1B valuation, with details on platform and plans.

Companies:Socket

Pulse 2.0

Pulse 2.0 reports Socket's $60M Series C funding, emphasizing protection for AI-generated code.

Companies:Socket

Socket Blog

Socket announces $60M Series C funding at $1B valuation led by Thrive Capital to expand software supply chain security for AI-driven development.

Companies:Socket

BleepingComputer

Socket detected the node-ipc compromise and provided analysis.

Companies:Socket

BleepingComputer

Socket tracked 416 compromised package artifacts in the Shai Hulud attack.

Companies:SafeDepSocket

heise online

heise online reports on the TanStack attack, quoting Socket's recommendations for developers.

Companies:Socket

The Register

The Register covers the TanStack npm package compromise, mentioning Socket's tracking of the campaign.

Companies:Socket

CyberScoop

Article about Mini Shai-Hulud malware includes commentary from Snyk's Stephen Thoemmes, highlighting Snyk's role in security research.

Companies:SocketSnyk