YHacker Newsscreenshots

socket.dev on Hacker News

17 stories on the front page, newest first. Scroll down to watch the site change over time.

Screenshot of socket.dev: Mythos Attempted to Social Engineer Open Source Maintainer to Merge Malware

Mythos Attempted to Social Engineer Open Source Maintainer to Merge Malware (socket.dev)

13 points by bhavansig 2 months ago | 1 comments

Screenshot of socket.dev: Bitwarden CLI compromised in ongoing Checkmarx supply chain campaign

Bitwarden CLI compromised in ongoing Checkmarx supply chain campaign (socket.dev)

844 points by tosh 6 months ago | 412 comments

Socket Research blog post reporting that Bitwarden CLI 2026.4.0 was compromised via an abused GitHub Action as part of the Checkmarx supply chain campaign.

supply-chain-attack bitwarden npm github-actions

Screenshot of socket.dev: Trivy under attack again: Widespread GitHub Actions tag compromise secrets

Trivy under attack again: Widespread GitHub Actions tag compromise secrets (socket.dev)

223 points by jicea 7 months ago | 79 comments

Screenshot of socket.dev: NPM to implement staged publishing after turbulent shift off classic tokens

NPM to implement staged publishing after turbulent shift off classic tokens (socket.dev)

195 points by feross 9 months ago | 102 comments

Screenshot of socket.dev: Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised

Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised (socket.dev)

1182 points by jamesberthoty 1 year ago | 965 comments

StepSecurity blog post reporting that @ctrl/tinycolor and 40+ npm packages were compromised by self-propagating malware that steals cloud credentials.

supply-chain-attack npm shai-hulud malware

Screenshot of socket.dev: Active NPM supply chain attack: Tinycolor and 40 Packages Compromised

Active NPM supply chain attack: Tinycolor and 40 Packages Compromised (socket.dev)

29 points by feross 1 year ago | 4 comments

Screenshot pending…

DuckDB NPM Account Compromised in Continuing Supply Chain Attack (socket.dev)

9 points by feross 1 year ago | 1 comments

Screenshot of socket.dev: Libxml2 Maintainer Ends Embargoed Vulnerability Reports, Citing Unsustainable

Libxml2 Maintainer Ends Embargoed Vulnerability Reports, Citing Unsustainable (socket.dev)

4 points by feross 1 year ago | 0 comments

Screenshot pending…

AI Hallucinations Are Fueling a New Class of Supply Chain Attacks (socket.dev)

13 points by sksxihve 1 year ago | 3 comments

Screenshot pending…

Curl Project and Go Security Teams Reject CVSS as Broken (socket.dev)

19 points by feross 1 year ago | 3 comments

Screenshot pending…

New Rust RFC Proposes Adding Support for Trusted Publishing to Crates.io (socket.dev)

13 points by feross 2 years ago | 1 comments

Screenshot of socket.dev: Unverified NPM Account Takeover Vulnerability for Sale on Dark Web Forum

Unverified NPM Account Takeover Vulnerability for Sale on Dark Web Forum (socket.dev)

35 points by feross 2 years ago | 3 comments

Screenshot pending…

Namecheap Takes Down Polyfill.io Service Following Supply Chain Attack (socket.dev)

13 points by feross 2 years ago | 0 comments

Screenshot of socket.dev: The push to ban ransom payments is gaining momentum

The push to ban ransom payments is gaining momentum (socket.dev)

99 points by feross 2 years ago | 124 comments

Screenshot of socket.dev: German Court Fines Security Researcher for Reporting Company's Vulnerabilities

German Court Fines Security Researcher for Reporting Company's Vulnerabilities (socket.dev)

52 points by ankitdce 2 years ago | 14 comments

Screenshot of socket.dev: The Everything NPM Package

The Everything NPM Package (socket.dev)

163 points by defied 2 years ago | 115 comments

Screenshot of socket.dev: Social engineering campaign targeting tech employees spreads through NPM malware

Social engineering campaign targeting tech employees spreads through NPM malware (socket.dev)

106 points by feross 3 years ago | 71 comments