Search: socket.dev | Heykuki News

HK

Heykuki News

Top New Best Ask Show Jobs

Top New Best Ask Show Jobs

121.

Go Supply Chain Attack: fake boltdb

a year ago

4 points

122.

Go Supply Chain Attack: Malicious Package Exploits Go Module Proxy Caching

a year ago

4 points

123.

Supply Chain Attack on NPM Packages Injects Cryptojacking Malware

2 years ago

4 points

124.

PyPI on Ultralytics Supply Chain Attack: Poor CI/CD Practices to Blame, No

2 years ago

4 points

125.

Malicious Maven Package Impersonating 'XZ for Java' Library Introduces Backdoor

2 years ago

4 points

126.

New Axobject-Query Maintainer Faces Backlash over PR to Support Node.js 0.4

2 years ago

4 points

127.

New Research Shows Teams of LLM Agents Can Autonomously Exploit Zero-Day

2 years ago

4 points

128.

The Alarming NVD Backlog: Over 50% of Known Exploited Vulnerabilities Await

2 years ago

4 points

129.

Laravel Lang Compromised with RCE Backdoor Across 700 Versions

a month ago

4 points

130.

Active Supply Chain Attack Compromises Antv Packages on NPM

a month ago

882542F3884314B

4 points

131.

Ruby Gems and Go Modules Impersonate Dev Tools to Steal Secrets and Poison CI

2 months ago

4 points

132.

Malicious Checkmarx Artifacts Found in Official KICS Docker Repository

2 months ago

4 points

133.

Critical Security Vulnerability in React Server Components

7 months ago

4 points

134.

Rust Support Now in Beta

9 months ago

4 points

135.

Nx Investigation Reveals GitHub Actions Workflow Exploit Led to NPM Token Theft

10 months ago

4 points

136.

Rspack Introduces Rslint, a TypeScript-First Linter Written in Go

10 months ago

4 points

137.

Oxlint Introduces Type-Aware Linting Preview

10 months ago

4 points

138.

NPM 'Is' Package Hijacked in Expanding Supply Chain Attack

a year ago

4 points

139.

Knip Hits 500 Releases with v5.62.0, Improving TypeScript Config Detection and

a year ago

4 points

140.

ECMAScript 2025 Finalized with Iterator Helpers, Set Methods, RegExp.escape, and

a year ago

4 points

141.

Protestware in JavaScript UI Toolkits on NPM Target Russian Language Sites

a year ago

4 points

142.

Node.js Moves Toward Stable TypeScript Support with Amaro 1.0

a year ago

4 points

143.

Malicious Koishi Chatbot Plugin Exfiltrates Messages Triggered by 8-Character

a year ago

4 points

144.

Backdooring the IDE: Malicious NPM Packages Hijack Cursor Editor on macOS

a year ago

4 points

145.

Go Support Is Now Generally Available

a year ago

4 points

146.

Vlt Launches Real-Time Dependency Analysis Powered by Socket

a year ago

4 points

147.

Oxlint Now in Beta with 500 Built-In Rules and 2X Faster JavaScript Linting

a year ago

4 points

148.

New PyPI Malware 'Set-Utils' Exfiltrates Ethereum Private Keys Through

a year ago

4 points

149.

Bybit Hack Puts Crypto Losses at $1.6B, Surpassing All of Last Year in Just Two

a year ago

4 points

150.

Opengrep Emerges as Open Source Alternative Amid Semgrep Licensing Controversy

a year ago

4 points