Log inSign up
Socket
3,351 posts
Socket profile banner
@SocketSecurity

Socket

@SocketSecurity
Socket is the #1 software supply chain security platform. Next-gen SCA + SBOM + 0-day prevention. LOVED BY DEVELOPERS. 👀 @npm_malware
https://socket.dev/careers
socket.dev
Joined November 2021
4,604
Following
22.6K
Followers
RepliesRepliesRepostsRepostsMediaMedia

Log in or sign up for X

See what’s happening and join the conversation

Continue with phone
or
Log in with username or email
Terms·Privacy·Cookies·Accessibility·Ads Info·© 2026 X Corp.
  • Pinned
    @SocketSecurity
    Socket
    @SocketSecurity
    May 22
    Today is a big day for Socket.
    @feross
    Feross
    Socket
    @feross
    May 20
    Today is a big day for @SocketSecurity. We just raised a $60M Series C at a $1B valuation, led by @ThriveCapital with participation from @a16z, @AbstractVC, and @CapitalOne Ventures. Total funding is now $125M. Four years ago, we started Socket because open source dependencies
    4
  • @SocketSecurity
    Socket
    @SocketSecurity
    11h
    The Rustification of #JavaScript tooling continues: @pnpmjs 12 has been rewritten in Rust, with installs up to 90% faster in testing. Other highlights: project-aware global bins, registry revisions, & deterministic lockfiles for cyclic dependency graphs.
    pnpm 12’s Rust Rewrite Cuts Install Times by Up to 90%
    From socket.dev
  • @SocketSecurity
    Socket
    @SocketSecurity
    16h
    What happens when AppSec leaders set aside vendor rivalries at Black Hat? 🤔 Socket CTO @AhmadNassri joined a roundtable of leaders to tackle some of the most pressing issues in open source supply chain security. 🔥 Great panel + a few spicy takes →
    6 AppSec CTOs Debate Open Source Supply Chain Security at Black Hat
    From socket.dev
  • @SocketSecurity
    Socket
    @SocketSecurity
    23h
    Socket researchers uncovered more FUNNULL-linked activity on Packagist: 13 malicious themes that expose site visitors to gambling redirects and, on iPhones, a WebKit-to-kernel exploit chain that installs spyware and steals crypto wallet seeds.
    13 Malicious Packagist Themes Deliver iOS Spyware That Steals Crypto Wallet Seeds
    From socket.dev
    1
  • @SocketSecurity
    Socket
    @SocketSecurity
    Aug 28
    🚨 10 malicious OpenAPI React Query Codegen versions were published to npm in a Mini Shai-Hulud attack through a comment-triggered workflow. All carry valid provenance. The latest tag still points to compromised v3.0.4.
    2