A threat actor breached AI music generator Suno by compromising a single employee with the Shai-Hulud worm, then used harvested GitHub and cloud credentials to access the company's source code, custom…
Compromised npm packages in the AsyncAPI namespace deliver the Miasma botnet loader, according to Socket AI Scanner. The malicious packages @asyncapi/generator-helpers, @asyncapi/generator-components,…
Socket's AI scanner flagged a malicious NuGet package named Braintree.Net on July 3, 2026, which impersonates the official Braintree SDK to steal credit card data, merchant API keys, and host secrets.…
Socket's AI scanner detected 17 malicious npm and PyPI packages published on July 7, 2026, that typosquat popular payment apps PaySafe, Skrill, and Neteller to steal credentials and tokens from SDK de…
Node.js is considering a proposal to move lower-severity security reports into a public workflow due to an overwhelming surge in AI-generated vulnerability submissions. Security maintainer Rafael Gonz…
Socket CEO Feross Aboukhadijeh told the Risky Business podcast that AI coding agents are accelerating software supply chain risks by pulling in dependencies at machine speed and making unreviewed trus…
Socket Threat Research tracked a fresh compromise in the Miasma Mini Shai-Hulud supply chain campaign affecting legitimate npm packages under the @immobiliarelabs scope, including Backstage plugins fo…
A new supply chain attack wave from the Mini Shai-Hulud, Miasma, and Hades malware family has compromised LeoPlatform and RStreams npm packages, GitHub Actions workflows, and the Verana Blockchain Go …
The U.S. government has escalated a national security clampdown on Anthropic, forcing the company to pull its Claude Fable 5 and Mythos 5 models globally after the NSA lost access to the systems. The …
A security expert warns that AI agents are creating a new software supply chain risk by fetching and running unvetted open-source packages in ephemeral sandboxes, bypassing traditional scanners and re…
Socket MCP has expanded its AI assistant capabilities to include organization alert review, threat feed investigation, and package file inspection, enabling AppSec and engineering teams to triage supp…
Socket Threat Research identified shai_hulululud@1.0.48596, an npm package designed to probe AI-based malware scanners using prompt injection, token flooding, and obfuscated JavaScript. The package co…
Socket's Threat Research team identified 23 new malicious PyPI packages in the Mini Shai-Hulud, Miasma, and Hades supply chain attacks, expanding the campaign to 471 artifacts across npm and PyPI. The…
The US government forced Anthropic to suspend its Claude Fable 5 and Claude Mythos 5 models three days after launch, citing a national security directive over a reported jailbreak method. Anthropic di…
Socket appointed Andrew Becherer as its first Chief Information Security Officer. Becherer, former CISO at Datadog and Iterable, will lead security, compliance, and risk as the company protects over 2…
Socket has partnered with Replit to integrate its Socket Firewall into Replit's AI-powered development platform, blocking approximately 8,000 malicious open source packages per day. The partnership ai…
Socket Threat Research identified 23 new malicious PyPI packages in the Mini Shai-Hulud, Miasma, and Hades supply chain attacks, targeting bioinformatics and AI/MCP developers with trojanized native e…
Socket detected a coordinated PyPI compromise involving 37 malicious wheel artifacts across 19 packages, part of the Shai-Hulud/Miasma campaign that uses Python startup execution to download Bun and r…