Heykuki News
Top
New
Best
Ask
Show
Jobs
Toggle theme
Login
Top
New
Best
Ask
Show
Jobs
61.
▲
Socket Firewall: Free, Proactive Protection for Your Software Supply
(socket.dev)
8 points
feross
8 months ago
discuss
62.
▲
Rust Support in Socket
(socket.dev)
8 points
feross
10 months ago
discuss
63.
▲
Python Adopts Standard Lock File Format for Reproducible Installs
(socket.dev)
8 points
feross
a year ago
discuss
64.
▲
PyPI Now Supports iOS and Android Wheels for Mobile Python Development
(socket.dev)
8 points
feross
a year ago
discuss
65.
▲
"Valkey" Open Source Redis Fork Backed by Linux Foundation, Amazon, Google
(socket.dev)
8 points
feross
2 years ago
discuss
66.
▲
Judicious JSON
(socket.dev)
8 points
feross
2 years ago
discuss
67.
▲
.NET Support in Socket
(socket.dev)
7 points
feross
a year ago
2 comments
68.
▲
Widespread Trivvy GitHub Actions Tag Compromise Exposes CI/CD Secrets
(socket.dev)
7 points
donutshop
3 months ago
1 comment
69.
▲
Potemkin Understanding in LLMs: New Study Reveals Flaws in AI Benchmarks
(socket.dev)
7 points
akyuu
a year ago
1 comment
70.
▲
The Growing Risk of Malicious Browser Extensions
(socket.dev)
7 points
feross
a year ago
1 comment
71.
▲
Malicious Chrome Extension Steals MEXC API Keys for Account Takeover
(socket.dev)
7 points
feross
5 months ago
discuss
72.
▲
Malicious Go Packages Impersonate Google's UUID Library and Exfiltrate Data
(socket.dev)
7 points
feross
6 months ago
discuss
73.
▲
NPM 'Is' Package Hijacked in Expanding Supply Chain Attack
(socket.dev)
7 points
choult
a year ago
discuss
74.
▲
TC39 advances proposals for RegExp Escaping, Float16Array, Redeclarable vars
(socket.dev)
7 points
feross
a year ago
discuss
75.
▲
North Korean Apt Lazarus Targets Developers with Malicious NPM Package
(socket.dev)
7 points
feross
a year ago
discuss
76.
▲
Over 20,000 backdoored NPM, PyPI, and Go packages detected by Socket
(socket.dev)
7 points
feross
2 years ago
discuss
77.
▲
Tanstack NPM Packages Compromised in Ongoing Supply-Chain Attack
(socket.dev)
6 points
pier25
a month ago
1 comment
78.
▲
React Team Updates CRA Migration Guidance After Community Pushback
(socket.dev)
6 points
feross
a year ago
1 comment
79.
▲
108 Chrome Extensions Linked to Data Exfiltration and Session Theft via C2
(socket.dev)
6 points
jbegley
2 months ago
discuss
80.
▲
The Hidden Blast Radius of the Axios Compromise
(socket.dev)
6 points
feross
2 months ago
discuss
81.
▲
Enisa Technical Advisory on Secure Use of Package Managers
(socket.dev)
6 points
pier25
3 months ago
discuss
82.
▲
Python 3.14 Released with Template String Literals, Deferred Annotations, and
(socket.dev)
6 points
feross
8 months ago
discuss
83.
▲
PodRocket Podcast: Inside the Recent NPM Supply Chain Attacks
(socket.dev)
6 points
feross
8 months ago
discuss
84.
▲
Django Joins Curl in Pushing Back on AI Slop Security Reports
(socket.dev)
6 points
feross
a year ago
discuss
85.
▲
Repository Labels and Security Policies
(socket.dev)
6 points
feross
a year ago
discuss
86.
▲
Obfuscation 101: Unmasking the Tricks Behind Malicious Code
(socket.dev)
6 points
feross
a year ago
discuss
87.
▲
Deno 2.2 Improves Dependency Management and Expands Node.js Compatibility
(socket.dev)
6 points
feross
a year ago
discuss
88.
▲
Linux Foundation Warns Open Source Developers: Compliance with Sanctions Is Not
(socket.dev)
6 points
feross
a year ago
discuss
89.
▲
CISA Announces Initiative to Fortify Security of Open Source Package Registries
(socket.dev)
6 points
feross
2 years ago
discuss
90.
▲
Trivy Supply Chain Attack Expands to Compromised Docker Images
(socket.dev)
5 points
feross
3 months ago
3 comments
More