1. X
  2. Philipp Burckhardt
Log inSign up
Philipp Burckhardt
6,936 posts
Image
user avatar
Philipp Burckhardt
@burckhap
⚡Securing Software Supply Chains at @SocketSecurity (socket.dev) 🔭 Scientific computing for the web via @stdlibjs (stdlib.io)
Pittsburgh, PA
philipp-burckhardt.com
Joined October 2010
1,741
Following
1,603
Followers
RepliesRepliesMediaMedia

Log in or sign up for X

See what’s happening and join the conversation

Continue with phone
or
Log in with username or email
Terms·Privacy·Cookies·Accessibility·Ads Info·© 2026 X Corp.
  • Pinned
    user avatar
    Philipp Burckhardt
    @burckhap
    Jul 18, 2023
    GraphMaker for easy graph building: describe in English what nodes and edges you want, and it handles the rest via OpenAI's help. Support for trees, DAGs, styling, saving in multiple formats etc. Work in progress, please send @CRGenovese and me feedback!
    github.com
    GitHub - isle-project/graphmaker: GraphMaker is a tool for creating, manipulating, and exporting...
    GraphMaker is a tool for creating, manipulating, and exporting graphs using natural language. - isle-project/graphmaker
    1.5K
  • user avatar
    Philipp Burckhardt
    @burckhap
    Apr 22
    Today, Socket detected malicious Namastex.ai npm packages that appear to replicate TeamPCP-style Canister Worm patterns, including exfiltration and self-propagation.
    Image
    Namastex Labs
    From namastex.ai
    2K
  • user avatar
    Philipp Burckhardt
    @burckhap
    Mar 14
    We identified 72 malicious Open VSX extensions linked to the GlassWorm campaign, including many cases where the malware is distributed transitively by being delilvered via covert extension packs. See below for link to our full coverage.
    95
  • user avatar
    Philipp Burckhardt
    @burckhap
    Sep 26, 2025
    While we haven't seen major supply chain attacks hitting any of the major open-source ecosystems, the Socket Threat Research Team uncovered some fascinating and creative attack techniques worth sharing:
    92
  • user avatar
    Philipp Burckhardt
    @burckhap
    Jul 17, 2025
    On the @stdlibjs blog, we just published my take on @METR_Evals's surprising study: AI tools made experienced developers 19% slower (expectation: 40% faster!)🤯 I dive into the why, where AI coding tools actually help, and how I've shifted from handholding AI to async delegation.
    897
  • See @burckhap's full profile

    Sign up
    Log in
Advertisement
Advertisement