Security News
/Company News
Securing the Financial Frontier: How Capital One Uses Socket for Open Source Security
Capital One is partnering with Socket to proactively secure its open source supply chain.
By Sarah Gooding - Oct 01, 2026
New:Microsoft Teams Notifications Are Now Available in Socket.Learn more →
jito-components
Advanced tools
This package has malicious versions linked to the ongoing "North Korea’s Contagious Interview Campaign" supply chain attack.
Security holding package
This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
Please refer to www.npmjs.com/advisories?search=jito-components for more information.
FAQs
security holding package
The npm package jito-components receives a total of 0 weekly downloads. As such, jito-components popularity was classified as not popular.
We found that jito-components demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Package last updated on 21 Aug 2025
Related posts
Security News
Insecure Agents Podcast: How to Keep AI Agents From Bypassing Security Controls
Socket CTO Ahmad Nassri discusses how to keep AI agents from bypassing package blocks, limit credential access, and monitor their actions.
By Sarah Gooding - Oct 01, 2026
Security News
New AISI Report Details How GPT-6 Astra Turned CTF Challenges Into Supply Chain Attacks
GPT-6 Astra tried to plant malicious code in simulated open source projects using fake GitHub accounts and deceptive PRs during an assigned CTF challenge.
By Sarah Gooding - Sep 30, 2026