Spot malicious packages on the web
Get real-time threats detection on any website or configure for specific sites, i.e. GitHub, npm, PyPI, Maven Central, pkg.go.dev, Stack Overflow
Install
$npminstallreactreact-domcrossenv
crossenv@0.0.2-security
Known malware
High CVE
AI-detected possible typosquat
Instant Security Insights for Smarter Dependency Choices
Security metrics for npm, PyPI, Go, and Maven package pages and search results
Threat detection
Identify potential threats such as malware, typo-squatting, and vulnerable dependencies.
Security at a glance
See security metrics and the total number of threats detected for each package.
Customizable site access
Control which websites the extension is active on and keep security insights where you need them.
Socket is one of the most interesting approaches to supply chain security. If you are interested in the risks of malicious deps in your apps, I definitely recommend taking a look at Socket!
Devdatta AkhaweSecurity and Production Engineering, Figma
Call us at (844) SOCKET-0
Cut through the noise and focus on real threats.
Get actionable alerts for the supply chain risks that matter. Socket highlights risky dependencies directly within the developer workflow.
