Search: socket.dev | Heykuki News

Heykuki News

Top New Best Ask Show Jobs

Top New Best Ask Show Jobs

31.

Go Supply Chain Attack: Malicious Package Exploits Go Module Proxy Caching For (socket.dev)

17 points

a year ago

32.

Go Supply Chain Attack: Malicious Package Exploits Go Module (socket.dev)

17 points

a year ago

33.

Supply Chain Attack Detected in Solana/Web3.js Library (socket.dev)

17 points

2 years ago

34.

AI Agent Lands PRs in Major OSS Projects, Targets Maintainers via Cold Outreach (socket.dev)

16 points

4 months ago

35.

$4.6M Series Seed to defend open source from supply chain attacks (socket.dev)

14 points

4 years ago

36.

NPM 'Is' Package Hijacked in Expanding Supply Chain Attack (socket.dev)

14 points

a year ago

37.

Open Source Maintainers Demand Ability to Block Copilot-Generated Issues and PRs (socket.dev)

14 points

a year ago

38.

Researcher Exposes 0-Day Clickjacking Vulnerabilities in Major Password Managers (socket.dev)

13 points

10 months ago

39.

Socket AI – Scan every NPM and PyPI package for malware with ChatGPT (socket.dev)

13 points

3 years ago

40.

Express.js Spam PRs Highlight the Commoditization of Open Source Contributions (socket.dev)

13 points

2 years ago

41.

Slopsquatting: AI Hallucinations Fuel New Class of Supply Chain Attacks (socket.dev)

12 points

a year ago

42.

Supply Chain Attacks Targeting LLM Application Developers: The Hidden Dangers Of (socket.dev)

12 points

2 years ago

43.

The Rise of Slopsquatting (socket.dev)

11 points

a year ago

44.

AI Slop Is Polluting Bug Bounty Platforms with Fake Vulnerability Reports (socket.dev)

11 points

a year ago

45.

Typosquatted Go Packages Deliver Malware Loader Targeting Linux and macOS (socket.dev)

11 points

a year ago

46.

NIST's New Password Guidelines Will Eliminate Periodic Changes and Special (socket.dev)

11 points

2 years ago

47.

Threat Actor Exposes Playbook for Exploiting NPM to Build Blockchain-Powered (socket.dev)

11 points

2 years ago

48.

Socket, an open source supply chain security platform (socket.dev)

11 points

4 years ago

49.

Contagious Interview Campaign Escalates with 67 Malicious NPM Packages and New (socket.dev)

10 points

a year ago

50.

The GitHub Infrastructure Powering North Korea's Contagious Interview NPM Attack (socket.dev)

10 points

giuliomagnifico

6 months ago

51.

Shai-Hulud-Style NPM Worm Hijacks CI Workflows and Poisons AI Toolchains (socket.dev)

10 points

4 months ago

52.

Wget to Wipeout: Malicious Go Modules Fetch Destructive Payload (socket.dev)

10 points

a year ago

53.

Laravel Lang Compromised with RCE Backdoor Across 700 Versions (socket.dev)

9 points

21 days ago

54.

Ongoing Supply Chain Attack Targets CrowdStrike NPM Packages (socket.dev)

9 points

9 months ago

55.

Free Software Foundation Goes to Bat for AGPL in Amicus Brief Criticizing (socket.dev)

9 points

a year ago

56.

Redis License Shift Splits Community: Open-Source Contributors Move to Fork (socket.dev)

9 points

2 years ago

57.

Node.js Community Debate Intensifies over Potentially Unbundling NPM (socket.dev)

9 points

2 years ago

58.

New Website "Is It FOSS?" Tracks Transparency in Open Source Distribution (socket.dev)

8 points

10 months ago

59.

AI Slop Is Polluting Bug Bounty Platforms with Fake Vulnerability Reports (socket.dev)

8 points

a year ago

60.

Shai-Hulud-Style NPM Worm Hijacks CI Workflows and Poisons AI Toolchains (socket.dev)

8 points

4 months ago