
Research
npm Malware Targets Telegram Bot Developers with Persistent SSH Backdoors
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
Product
Sarah Gooding
March 21, 2025
We're excited to announce that Socket is now available on Google Cloud Marketplace! This strategic partnership allows Google Cloud customers to easily deploy our advanced security solutions while simplifying procurement and consolidating billing through their existing Google Cloud agreements.
With over 90% of modern applications built on open source, these components have become prime targets for threat actors looking to infiltrate enterprise systems through the software supply chain.
Our AI-powered threat detection for software dependencies has enabled us to detect and block over 100 supply chain attacks every week, providing real-time protection against malware and zero-day threats that legacy tools miss.
Since raising $40M in our Series B funding in October 2024, we've continued our rapid growth, now protecting over 7,800 organizations and 650,000 GitHub repositories. Our platform supports eight programming languages and handles critical use cases like license enforcement and reachability analysis, making Socket a comprehensive replacement for legacy Software Composition Analysis (SCA) tools.
Socket is now available for immediate purchase and deployment through the Google Cloud Marketplace.
Ready to secure your software supply chain? Book a demo with our technical experts to learn how Socket can protect your organization from the next generation of supply chain attacks.
Subscribe to our newsletter
Get notified when we publish new security blog posts!
Try it now
Research
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
Security News
pip, PDM, pip-audit, and the packaging library are already adding support for Python’s new lock file format.
Product
Socket's Go support is now generally available, bringing automatic scanning and deep code analysis to all users with Go projects.