GitHub Mandates 2FA and Short-Lived Tokens to Strengthen npm Supply Chain Security

A terrifying, self-replicating malwaere has infected npm packages with over 2 million downloads per week - here's how to stay safe

Fraudsters use fake stars to game Github, scam users

Malicious npm Package nodejs-smtp Mimics Nodemailer, Targets Atomic and Exodus Wallets

Talent Partner

Socket is a company that helps developers and security teams ship faster by eliminating security busywork. They are seeking a high-performing Talent Partner to play a critical role in recruiting top-tier engineering and sales talent, while maintaining strong relationships with hiring teams and optimizing hiring processes.

Sign up with Google

Sign in with Google