Toptal’s GitHub Organization Hijacked: 10 Malicious Packages Published

Socket now supports the pnpm package manager! Check it out and stay away from vulnerable and malicious packages.

We're excited to announce that Socket now supports the Python programming language.

Socket is thrilled to announce that we have achieved a sparkling clean SOC 2 Type 2 attestation report.

Proposing a more usable RegExp for JS in light of async I/O and streaming.

Socket is nominating Bradley Meck Farias as a representative to the OpenSSF Governing Board.

We have a new configuration file format and library for working with it!

Socket is proud to announce improved support for npm and Yarn, including full support for npm versions 6, 7, 8, and 9 and full support for Yarn versions 1, 2, and 3.

Introducing a VS Code editor integration for Socket Security.

Socket has introduced a new dashboard functionality to aid in self service and auditing in one centralized location.

We have been using GPT at Socket to help triage the npm package firehose for a couple months now. Here is what it is like after actual experience.

File explorers are great tools for programmers when they can let code be understood, but what does it take to ship a file explorer and what does it mean to help programmers by providing one.

A package published an anomalous 11460 versions in 4 months, Socket Security had to figure out if it was something to be concerned about.