This page may contain stale information. Last updated: 2026-08-04
Overview
Socket is a software supply-chain security company that analyzes open-source package risk and publishes incident reports on npm and related ecosystems.
Recent Developments
- 2026-08-04: Reported keyv/cacheable shai-hulud-worm propagation via stolen npm tokens and OIDC trusted publishing (2026-08-04-socket-keyv-cacheable-supply-chain, 2026-08-04-npm-shai-hulud-keyv-supply-chain-attack)