Security News
Composer 2.11 Adds Dependency Cooldowns
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.
By Sarah Gooding - Nov 03, 2026
New:Introducing Socket Scanning for VS Code Marketplace Extensions.Learn more →
@hexvero/core
Advanced tools
The README file is missing
FAQs
Zero-dependency static parsers behind hexvero, the Electron release diff: app.asar, JavaScript bundles, IPC and contextBridge, plus ELF, PE, Mach-O, APK and more. Never runs what it reads.
The npm package @hexvero/core receives a total of 82 weekly downloads. As such, @hexvero/core popularity was classified as not popular.
We found that @hexvero/core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Package last updated on 14 Oct 2026
Related posts
Threat Research
/Security News
Cursor Removes Malicious Claude Code 2.1.313 Extension From Its Marketplace
Cursor removed a malicious Claude Code 2.1.313 extension from its marketplace. Socket examines registry records and the initial claims about its distribution.
By Socket Research Team - Oct 30, 2026
Security News
OpenCode User Hit with Hostile Backlash After Reporting Free AI Loophole
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.
By Sarah Gooding - Oct 29, 2026