Socket
CompanySocket is a developer-focused security company that scans open-source packages, extensions, and other dependencies for malware, backdoors, and risky code. Its tools help engineering teams prevent supply-chain attacks and keep CI/CD pipelines and developer workstations safe.
Stories
Completed digest stories linked to this service.
-
Npm imposters for pgserve and automagik exfiltrate cloud creds and worm into you...2026-04-23Malicious npm packages impersonating pgserve and automagik are stealing cloud credentials and infecting develo...
-
LLM tooling grows up: Continue hardens, LangChain OpenRouter adds metadata, Data...2026-03-26LLM dev tools got stability and governance upgrades across Continue, LangChain OpenRouter, and Datasette-llm t...
-
GlassWorm hits Open VSX while AI agents go rogue: lock down your dev stack and p...2026-03-16A new Open VSX supply‑chain attack and real AI‑agent mishaps highlight gaps in developer tooling and runtime g...