Libxml2 Maintainer Ends Embargoed Vulnerability Reports, Citing Unsustainable (socket.dev)

Screenshot of socket.dev: Libxml2 Maintainer Ends Embargoed Vulnerability Reports, Citing Unsustainable

First screen, captured 1 year ago.

Looks similar

Screenshot of socket.dev: Social engineering campaign targeting tech employees spreads through NPM malware

Social engineering campaign targeting tech employees spreads through NPM malware (socket.dev)

106 points by feross 3 years ago | 71 comments

Screenshot of socket.dev: Trivy under attack again: Widespread GitHub Actions tag compromise secrets

Trivy under attack again: Widespread GitHub Actions tag compromise secrets (socket.dev)

223 points by jicea 7 months ago | 79 comments

Screenshot of socket.dev: Bitwarden CLI compromised in ongoing Checkmarx supply chain campaign

Bitwarden CLI compromised in ongoing Checkmarx supply chain campaign (socket.dev)

844 points by tosh 6 months ago | 412 comments

Socket Research blog post reporting that Bitwarden CLI 2026.4.0 was compromised via an abused GitHub Action as part of the Checkmarx supply chain campaign.

supply-chain-attack bitwarden npm github-actions

Screenshot of socket.dev: Active NPM supply chain attack: Tinycolor and 40 Packages Compromised

Active NPM supply chain attack: Tinycolor and 40 Packages Compromised (socket.dev)

29 points by feross 1 year ago | 4 comments

Screenshot of about.gitlab.com: GitLab discovers widespread NPM supply chain attack

GitLab discovers widespread NPM supply chain attack (about.gitlab.com)

330 points by OuterVale 11 months ago | 181 comments

GitLab blog post describing a widespread npm supply chain malware attack that includes a "dead man's switch" capable of harming user data.

npm supply-chain-attack malware gitlab

Screenshot of socket.dev: Mythos Attempted to Social Engineer Open Source Maintainer to Merge Malware

Mythos Attempted to Social Engineer Open Source Maintainer to Merge Malware (socket.dev)

13 points by bhavansig 2 months ago | 1 comments

Looks similar

Social engineering campaign targeting tech employees spreads through NPM malware(socket.dev)

Trivy under attack again: Widespread GitHub Actions tag compromise secrets(socket.dev)

Bitwarden CLI compromised in ongoing Checkmarx supply chain campaign(socket.dev)

Active NPM supply chain attack: Tinycolor and 40 Packages Compromised(socket.dev)

GitLab discovers widespread NPM supply chain attack(about.gitlab.com)

Mythos Attempted to Social Engineer Open Source Maintainer to Merge Malware(socket.dev)