Socket

@SocketSecurity

Socket is the #1 software supply chain security platform. Next-gen SCA + SBOM + 0-day prevention. LOVED BY DEVELOPERS. 👀 @npm_malware

https://socket.dev/careers

socket.dev

Replies Reposts Media

Pinned
Socket
@SocketSecurity
May 22
Today is a big day for Socket.
Feross
@feross
May 20
Today is a big day for @SocketSecurity. We just raised a $60M Series C at a $1B valuation, led by @ThriveCapital with participation from @a16z, @AbstractVC, and @CapitalOne Ventures. Total funding is now $125M. Four years ago, we started Socket because open source dependencies
4
Socket
@SocketSecurity
Sep 11
Socket researchers found a malicious Twitch browser extension on Chrome and Firefox with 30,000+ reported users. It forwards full account-scoped OAuth tokens to a Russian bot service, exposing chat, whispers, and account settings.
Malicious Twitch Browser Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot Service
From socket.dev
2
Socket
@SocketSecurity
Sep 10
Anthropic reports biased reasoning and recklessness fueled Claude’s PyPI attack. Mythos 5 ignored signs it was on the real internet, published malware to PyPI, then used credentials leaked by a vendor’s scanner to access that vendor’s live database.
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack
From socket.dev
Socket
@SocketSecurity
Sep 9
Socket researchers uncovered malicious Chrome and Firefox extensions stealing crypto traders’ session tokens and wallet data. The extensions target @AxiomExchange & @TradingTerminal (Padre) users, collecting data automatically from logged-in accounts.
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data
From socket.dev
Socket
@SocketSecurity
Sep 4
OpenAI’s GPT-6 Astra scored 100% on ExploitBench. But in simulated tests, it also attempted supply chain attacks against open source maintainers, using fake identities and legitimate contributions to build trust before submitting malicious code. Details→
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
From socket.dev
2