[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"vendor:socket":3},{"vendor":4,"products":15,"links":23,"research":28,"news":81,"iocs":84,"iocs_total":82,"activity":85},{"slug":5,"name":6,"domain":7,"website_url":8,"hq_country":9,"description":10,"logo_path":11,"brand_color":12,"pitch":13,"pitch_source_url":8,"updated_at":14},"socket","Socket","socket.dev","https:\u002F\u002Fsocket.dev\u002F","US","Software supply chain security company that detects malicious open-source packages. Its research team reports new malicious packages.","\u002Fvendor-logos\u002Fsocket.png","#d81ac6","Socket fights vulnerabilities and provides visibility, defense-in-depth, and proactive supply chain protection for JavaScript, Python, and Go dependencies.","2026-10-16T13:44:14.63463+00:00",[16],{"slug":5,"name":6,"url":8,"description":17,"pitch":13,"pitch_source_url":8,"controls":18},"Detects and blocks malicious and risky packages in npm, PyPI and other ecosystems.",[19],{"slug":20,"name":21,"problem":22},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[24],{"kind":25,"label":26,"url":27},"research","Socket blog","https:\u002F\u002Fsocket.dev\u002Fblog",{"total":29,"stories":30},138,[31,36,41,46,51,56,61,66,71,76],{"slug":32,"title":33,"published_at":34,"brief":35},"ghostaction-hackers-compromise-500-github-accounts-to-steal-aws-openai-and-cloud-bc2371","GhostAction Hackers Compromise 500+ GitHub Accounts to Steal AWS, OpenAI, and Cloud Credentials","2026-11-09T16:29:38+00:00","GhostAction hackers compromised 500+ GitHub accounts to steal cloud and AI credentials.",{"slug":37,"title":38,"published_at":39,"brief":40},"malicious-bee-js-npm-release-and-swarm-desktop-releases-deliver-sleepyduck-ether-c711ee","Malicious bee-js npm Release and Swarm Desktop Releases Deliver SleepyDuck Ethereum C2 Backdoor","2026-11-09T14:52:15.147+00:00","Malicious bee-js npm and Swarm Desktop releases delivered SleepyDuck backdoor via compromised GitHub automation.",{"slug":42,"title":43,"published_at":44,"brief":45},"free-certified-patch-for-critical-rails-active-storage-vulnerability-1a9fbc","Free Certified Patch for Critical Rails Active Storage Vulnerability","2026-11-06T20:40:46.426+00:00","Critical Rails Active Storage vulnerability allows arbitrary file writes and reads via crafted uploads.",{"slug":47,"title":48,"published_at":49,"brief":50},"shai-hulud-descendant-surfaces-in-malicious-ruby-gem-that-steals-credentials-and-12cd4e","Shai-Hulud Descendant Surfaces in Malicious Ruby Gem That Steals Credentials and Poisons AI Tools","2026-11-06T17:11:11.05+00:00","Malicious Ruby gem strutil-core installs credential-stealing worm and poisons AI tools.",{"slug":52,"title":53,"published_at":54,"brief":55},"cursor-removes-malicious-claude-code-2-1-313-extension-from-its-marketplace-4fb089","Cursor Removes Malicious Claude Code 2.1.313 Extension From Its Marketplace","2026-10-30T09:26:06.05+00:00","Cursor removed malicious Claude Code 2.1.313 extension from its marketplace affecting up to 5,000 users.",{"slug":57,"title":58,"published_at":59,"brief":60},"chrome-extensions-with-13-4-million-installs-caught-hijacking-searches-e12152","Chrome extensions with 13.4 million installs caught hijacking searches","2026-10-29T16:10:31+00:00","319 Chrome extensions with 13.4 million installs hijacked user searches.",{"slug":62,"title":63,"published_at":64,"brief":65},"malicious-firefox-extensions-impersonate-phantom-jupiter-and-bitget-to-steal-cry-62f117","Malicious Firefox Extensions Impersonate Phantom, Jupiter, and Bitget to Steal Crypto Wallet Keys","2026-10-28T13:17:06+00:00","Malicious Firefox extensions impersonated crypto wallets to steal user keys.",{"slug":67,"title":68,"published_at":69,"brief":70},"new-evidence-shows-litellm-secret-stealing-workflows-ran-11-days-before-supply-c-b10aa3","New Evidence Shows LiteLLM Secret-Stealing Workflows Ran 11 Days Before Supply Chain Attack","2026-10-23T21:00:31.47+00:00","Malicious workflows ran in LiteLLM repo 11 days before supply chain attack.",{"slug":72,"title":73,"published_at":74,"brief":75},"litellm-supply-chain-attack-hoovers-up-passwords-and-secrets-fbf98c","LiteLLM supply chain attack hoovers up passwords and secrets","2026-10-21T18:22:20+00:00","LiteLLM supply chain attack distributes malware to steal cloud and AI credentials.",{"slug":77,"title":78,"published_at":79,"brief":80},"litellm-pypi-package-and-docker-images-compromised-to-steal-cloud-and-ai-credent-6b67cc","LiteLLM PyPI Package and Docker Images Compromised to Steal Cloud and AI Credentials","2026-10-21T13:41:48.036+00:00","LiteLLM 1.107.0 PyPI package and Docker images compromised with credential stealer via Python startup hooks.",{"total":82,"stories":83},0,[],[],[86,89,92,95,98,101],{"month":87,"reported":88,"affected":82},"2026-06-01",15,{"month":90,"reported":91,"affected":82},"2026-07-01",21,{"month":93,"reported":94,"affected":82},"2026-08-01",19,{"month":96,"reported":97,"affected":82},"2026-09-01",9,{"month":99,"reported":100,"affected":82},"2026-10-01",18,{"month":102,"reported":103,"affected":82},"2026-11-01",4]