Socket @SocketSecurity
Socket is the #1 software supply chain security platform. Next-gen SCA + SBOM + 0-day prevention. LOVED BY DEVELOPERS. 👀 @npm_malware socket.dev https://socket.dev/careers Joined November 2021-
Tweets3K
-
Followers23K
-
Following5K
-
Likes2K
It's been one year since the Shai-Hulud npm worm was unleashed on the software supply chain, kicking off the worst year for npm security on record. It's now open source and has since torn through thousands of packages and organizations on its rampage. socket.dev/blog/happy-bir…
"PolinRider Spreads Through Compromised GitHub Accounts and Packagist" published by @SocketSecurity. #GitHub, #EtherHiding, #VSCode, #PolinRider, #NullReceiver socket.dev/blog/polinride…
We’re tracking more North Korea-linked PolinRider activity across GitHub and Packagist. New findings: 4 malicious dev versions, rewritten Git history, and obfuscated JavaScript planted in index.php and executed through PHP’s shell_exec() function. socket.dev/blog/polinride…
GitHub added cache-mode to GitHub Actions, a new control that limits cache access at the workflow or job level to reduce cache poisoning, the technique behind several recent high-profile supply chain attacks on npm and PyPI. socket.dev/blog/github-ac…
Ten years ago @jerodsanto had me on @changelog to talk about @WebTorrentApp. Today he joins @SocketSecurity as Head of Media. Most people know Jerod from The Changelog, where he spent over a decade building one of the best developer podcasts in the industry. He also made me a regular panelist on @JSPartyFM in 2018, so I've seen how he works up close. He's exceptional at it. He believed in Socket early, too. He was an early angel investor and has watched the company grow from the inside. Supply chain attacks are accelerating in frequency and impact. Every week brings a new named attack, a new worm, a new AI-assisted exploit. Most of the public conversation is hot takes. Developers and security teams deserve real analysis, from people who know what they're talking about, in formats they actually consume. That's the job. Podcasts, video, writing. Nobody I know is better suited for it. One more thing. This is Jerod's first full-time job since 2012. Fourteen years of independence, and he chose Socket. I don't take that lightly. Read his first post: socket.dev/blog/jerod-san…
🎉 We're excited to welcome @jerodsanto to Socket as our first Head of Media. After more than a decade as one of the most trusted voices in developer media, he's setting his sights on supply chain security. Find out what he's cooking up at Socket. socket.dev/blog/jerod-san…
I'm joining @feross and the gang as Head of Media at @SocketSecurity! jerodsanto.net/2026/09/joinin…
🎉 We're excited to welcome @jerodsanto to Socket as our first Head of Media. After more than a decade as one of the most trusted voices in developer media, he's setting his sights on supply chain security. Find out what he's cooking up at Socket. socket.dev/blog/jerod-san…
The incident, which wasn’t previously linked to OpenAI, happened two months before July’s Hugging Face hack. on.wsj.com/46jHme8
OpenAI confirmed its agents were behind the GemStuffer incident. Sandboxed during a training run without full internet access, they used the registry as a makeshift web browser to reach the open web. Story by @bobmcmillan with analysis from @socketsecurity wsj.com/tech/ai/cybera…
🚨 A new report links OpenAI agents to a RubyGems campaign that gained RCE on RubyDoc servers. The activity pushed 2,000+ packages, exfiltrated public data, and attempted to steal API keys. How the chain worked: thehackernews.com/2026/09/openai…
🔥 @SocketSecurity in WSJ today:
The incident, which wasn’t previously linked to OpenAI, happened two months before July’s Hugging Face hack. on.wsj.com/46jHme8
Socket researchers found a malicious Twitch browser extension on Chrome and Firefox with 30,000+ reported users. It forwards full account-scoped OAuth tokens to a Russian bot service, exposing chat, whispers, and account settings. socket.dev/blog/malicious…
Open source registries are the fastest ways to distribute code at scale. Maintainers and registry operators should be ready for agents to exploit that reach, whether the ecosystem is their target or simply on the path to one.
Anthropic reports biased reasoning and recklessness fueled Claude’s PyPI attack. Mythos 5 ignored signs it was on the real internet, published malware to PyPI, then used credentials leaked by a vendor’s scanner to access that vendor’s live database. socket.dev/blog/claude-py…
Anthropic reports biased reasoning and recklessness fueled Claude’s PyPI attack. Mythos 5 ignored signs it was on the real internet, published malware to PyPI, then used credentials leaked by a vendor’s scanner to access that vendor’s live database. socket.dev/blog/claude-py…
Socket researchers uncovered malicious Chrome and Firefox extensions stealing crypto traders’ session tokens and wallet data. The extensions target @AxiomExchange & @TradingTerminal (Padre) users, collecting data automatically from logged-in accounts. socket.dev/blog/chrome-fi…
Exciting news! 🙌 Today I'm joining @SocketSecurity as a Member of the Technical Staff. After years in distsys and protocol infrastructure, I am looking forward to helping build security infrastructure for the internet with @feross and the team
Shoutout to all #NodeConfEU 2026 #Sponsors and #Friends! Thank you! 💛 Your partnership is helping us create something truly special in the #Node.js #community! Our Sponsors 🙏 @Cloudflare @platformatic @SocketSecurity @nxtedition @ZephyrCloudIO @tether
OpenAI’s GPT-6 Astra scored 100% on ExploitBench. But in simulated tests, it also attempted supply chain attacks against open source maintainers, using fake identities and legitimate contributions to build trust before submitting malicious code. Details→ socket.dev/blog/gpt-6-ast…
should we add a new "code t-shirts" supply chain security scanner in @SocketSecurity ?
Public service announcement, if you find some random code on a t-shirt in Tokyo, don't pipe it into Bash.
Matteo Collina @matteocollina
58K Followers 4K Following @platformatic Co-Founder & CTO, @nodejs TSC Chair, Lead maintainer @fastifyjs, Board @OpenJSF, Conference Speaker, Ph.D. Past: @nearform. Views are my own.
Theo - t3.gg @theo
389K Followers 4K Following Full time CEO @t3dotcodes & @t3dotchat. Part time YouTuber, investor, and developer
Feross @feross
41K Followers 2K Following ⚡️ Founder + CEO @SocketSecurity (https://t.co/7g1opA7Tr8) • 🌲 Visiting lecturer @Stanford (https://t.co/yw9prxLiLe) • ❤️ Open source @WebTorrentApp + @StandardJS
sunil pai @threepointone
58K Followers 3K Following 🎈 Entscheidungsproblem. https://t.co/DISzWsXdnE forky mcforkface.
Seb ⚛️ ThisWeekIn... @sebastienlorber
55K Followers 4K Following 🔥 Join 40k devs - Stay up-to-date with React: • 📨 https://t.co/DvLGHeLY5G • @ThisWeekInReact • @docusaurus maintainer • 🇫🇷
Evan You @evanyou
314K Followers 2K Following Husband / Father of two / Founder @voidzerodev (acq. @cloudflare) / Creator @vuejs & @vite_js. Chinese-only alt: @yuxiyou
patagucci perf papi @kenwheeler
70K Followers 4K Following founder @ WheelerDefense, practically irresistible. violently suburban. sealand nobleman. forklift certified. user @openai @meta @netflix
Jordan Harband @ljharb
9K Followers 2K Following software engineer/nerd/teacher/will try anything once; surgeon with git rebase. @TC39 ex @Coinbase/@Airbnb/@Twitter/@MobBase. Fav punctuation ⸮, scent petrichor
Rlv @Rlvzn2ap
15 Followers 363 Following
Mohamed Elsaed @MElsaed14410
11 Followers 107 Following باحث في الأمن السيبراني | مهتم بأمن العقود الذكية (Smart Contracts) واكتشاف الثغرات البرمجية | مؤمن بأهمية الكشف المسؤول (Responsible Disclosure) لتعزيز الأمان
Junit @Elias_Junit
8 Followers 443 Following Founder. I write about building AI products, apps and games — what works, what breaks, what it costs. Now building: vibestretch.
:() @Diklafosas
0 Followers 97 Following
Bogon Martian @bogonmartian
6 Followers 59 Following martian packet from an unroutable address. wired kami correspondent. broken prophecies, liquidity weather & Bugles. you download me; i download you. 📡👽
道藏 @m2mpi
311 Followers 7K Following pioneer/vollar defi/ai cure all world greenpower station pharmacist acupuncturist 皈依犹太
Divya @shortdiv
6K Followers 4K Following She/Her. Recovering nomad. Building https://t.co/3sjq1G61Lh. Formerly @jazz_tools @flydotio @netlify Tweets about tea/climbing/bikes/food/tech
Sentient Doll @MrIXIXIX
88 Followers 527 Following Libertarian/INTJ-T/Chaotic Neutral. Liberty or death.
Ivan Ivanov @IvanIva88698599
14 Followers 85 Following
Christian Wagar @ChristianWagar
2 Followers 79 Following
PickMySoft | SAAS War... @pickmysoftcom
1 Followers 65 Following We review and track business software for people who actually buy it. Updates, comparisons, pricing, bugs, outages — and which tool just got left behind.
Luc Perkins @lucperkins
3K Followers 4K Following @DeterminateSys. Nomad. Co-author, Seven DBs in Seven Weeks (https://t.co/7K3vCAoWU0). PhD @DukePoliSci. #RipCity
Joey @0xjocke
269 Followers 1K Following
Aditya Pandey @lifewithadi38
29 Followers 118 Following
Lisa Kleinsorge @littlesorrows
458 Followers 1K Following Living at the edges of serendipity, 🧚Magic Chaser, 🍜Ramen Addict, 👀littlesorrows is literally my last name
Koutilya Theertha @Koutilya_M
0 Followers 114 Following
ZerGo0 @ZerGo0
116 Followers 1K Following Personal account. Owner of FBuddy, ZerGo0_Bot and more. ❌ Fuck Gen AI, support real artists
Truth @nxxhxz
6 Followers 63 Following
momo @MohamedDAFA2
14 Followers 144 Following
Sam @sam_uu_el
22 Followers 97 Following
Arshdeep Singh | AI G... @arshdeepdev
6 Followers 109 Following Full-Stack Developer → AI Automation Building AI systems, SaaS & business automations Helping businesses get more leads & sales Building in public 🚀
Sharanayya R Tenginam... @srtenginamath
225 Followers 779 Following Building https://t.co/tRdgct6BVF - AI Automation Workflow | 🎓 Software Engineer |📱&🖥 Full Stack Developer | 🎥 YouTuber - https://t.co/fOLIxKJqoQ
Beate Klatschfeld @c_qkie
44 Followers 3K Following Ohrfeigen möchte ich meinen zarten Wurstfinger trotzdem nicht antun
Adrian Niedzielski @AdrianNiednu
4 Followers 703 Following
bari suarez @bruhmentos_
131 Followers 936 Following sigara reliability engineer @ https://t.co/IlKFEtBS1j 1312
cr0@Defensive-Securit... @cr0nym
3K Followers 3K Following Focus on Linux/Kubernetes Attack/Detection/Forensics/Incident Response/Threat Hunting/Active Defense. Learning hard every single day.
Sami @TheXSami
149 Followers 121 Following - 12 years a SWE, now finding my way in the world of AI as a founder - Made https://t.co/oTjQDqhh1r, https://t.co/av1lJOqjC7, https://t.co/vqek4LzvDi - Working on ?
Ruxandra Fediuc 👩�... @ruxandrafed
3K Followers 889 Following 👩💻 Principal Architect @viralnationinc - ☁️ Google Professional Cloud Architect - 💻 Certified Kubernetes Administrator - 💡AWS Solutions Architect
Jennifer Byrne @se7eninstrument
0 Followers 73 Following
Greg Goodwin @greggoodwin
139 Followers 914 Following Software Engineer, OctoChimp Founder, US Army Combat Veteran, Father, and Husband.
Pablo Samela @PabloSamelaTech
2 Followers 110 Following
Connext-Hub｜AIセ�... @cnext_hub
3 Followers 37 Following 難しいAIセキュリティの事件を、AIで漫画にして誰でも分かる形に。 第1弾は「AIのハッキング力、測ったろ！」全32ページ（2026年7月・実話）。 AIを使ってアプリも開発中。
Numen @numen137
0 Followers 37 Following
Roei Hadashi @roeihadashi
7 Followers 460 Following I break in for a living — and I'm the one they call after someone else did. Head of Red Team & AI Security @ HackersEye
Venkata Gopi Yamparal... @VenkatVgopi
1 Followers 89 Following
Gergely Orosz @GergelyOrosz
357K Followers 3K Following Writing @Pragmatic_Eng, the #1 software engineering newsletter on Substack. Author of @EngGuidebook. Formerly Uber & Skype.
Wes Bos @wesbos
439K Followers 2K Following Fullstack JS Dev ❯ @SyntaxFM ❯ https://t.co/6heZ7gZqg1 ❯ https://t.co/lOo3xh23G1 ❯ https://t.co/XYbxq79WBS ❯ Posts 🔥 Tips
Sarah Drasner @sarah_edo
304K Followers 3K Following Opinions my own. Area Tech Lead, AI and Web Ecosystem @chrome, Formerly Sr. Director of Core Infra @google • O'Reilly Author • https://t.co/HhzYWwxqL9
Jarred Sumner @jarredsumner
191K Followers 644 Following building @bunjavascript at @anthropicai. formerly: @stripe (twice) @thielfellowship. high school dropout. npm i -g bun
Matteo Collina @matteocollina
58K Followers 4K Following @platformatic Co-Founder & CTO, @nodejs TSC Chair, Lead maintainer @fastifyjs, Board @OpenJSF, Conference Speaker, Ph.D. Past: @nearform. Views are my own.
Adam Wathan @adamwathan
300K Followers 830 Following Markdown engineer. Creator of @tailwindcss. Listener of Slayer. Austin 3:16.
Jake Archibald @jaffathecake
108K Followers 2K Following Developer of sorts at @firefox. No thought goes unpublished. He/him. Also jaffathecake on Mastodon, bsky, Threads etc.
Theo - t3.gg @theo
389K Followers 4K Following Full time CEO @t3dotcodes & @t3dotchat. Part time YouTuber, investor, and developer
Feross @feross
41K Followers 2K Following ⚡️ Founder + CEO @SocketSecurity (https://t.co/7g1opA7Tr8) • 🌲 Visiting lecturer @Stanford (https://t.co/yw9prxLiLe) • ❤️ Open source @WebTorrentApp + @StandardJS
Rich Harris @Rich_Harris
95K Followers 2K Following Cheese fan. I work on @sveltejs at @vercel. Mostly posting at https://t.co/1DNxt27Pks
Dan Lorenc @lorenc_dan
12K Followers 2K Following OSS Supply Chain Security. Founder/CEO/Primary Ariba Admin at https://t.co/sGmuUU9JbG Sigstore: https://t.co/dWKlyYu6kv
Jason Miller 🦊⚛ @_developit
64K Followers 2K Following Platform DX @Shopify. Created @preactjs. Do more with less. https://t.co/z1d6J24DlE @[email protected]
Suhail @Suhail
445K Followers 690 Following Starting something new. Past: CEO & Founder @mixpanel Pizzatarian, engineer, music maker
Seb ⚛️ ThisWeekIn... @sebastienlorber
55K Followers 4K Following 🔥 Join 40k devs - Stay up-to-date with React: • 📨 https://t.co/DvLGHeLY5G • @ThisWeekInReact • @docusaurus maintainer • 🇫🇷
Cory House @housecor
165K Followers 836 Following I help dev teams be insanely productive with AI. Courses: https://t.co/D5emROQHUh & https://t.co/6L1fD89GbP Consulting: https://t.co/Qfp4TfpB8N ⚛️
Sindre Sorhus @sindresorhus
66K Followers 523 Following I make apps and open source. Made @awesome__re. Also: @sindre_gh_repos @[email protected]
Robert McMillan @bobmcmillan
13K Followers 2K Following Reporter with the Wall Street Journal. BIO: https://t.co/olLOnHuYs2 Host of Hack Me if You Can https://t.co/vEoVoRbwTv
Evan Hubinger @EvanHub
60K Followers 4K Following Alignment Science lead @AnthropicAI. Opinions my own. Previously: MIRI, OpenAI, Google, Yelp, Ripple. (he/him/his)
Chris @ChrisGPT
66K Followers 2K Following Agi 2029 - AI Insider / Reporter as featured in Axios • The Information • NYT • Techcrunch
AI Security Institute... @AISecurityInst
21K Followers 32 Following We conduct scientific research to understand AI’s most serious risks and develop and test mitigations.
Troy Hunt @troyhunt
255K Followers 1K Following Founder & CEO of @haveibeenpwned, the most trusted name in data breach intelligence. Speaker, blogger, Microsoft Regional Director. Gold Coast, Australia.
SwiftOnSecurity @SwiftOnSecurity
416K Followers 9K Following computer security person. former helpdesk.
ATT&CK @MITREattack
119K Followers 514 Following MITRE ATT&CK® - A knowledge base for describing the behavior of adversaries. Replying/Following/Re-tweeting ≠ endorsement. @ https://t.co/wt46ArkZVt
︎ @0xocdsec
4K Followers 8K Following ︎🏴☠️ 🇪🇺 💚 🇺🇦 | computers & features | 💚 🏴☠️ party | memory enjoyer | 603,628 km² | https://t.co/F5dgX7AEoL
Rspack @rspack_dev
9K Followers 16 Following Rstack is a lightning-fast JavaScript toolchain that includes Rspack, Rsbuild, Rslib, Rspress, Rsdoctor, Rstest and Rslint.
jdx @jdxcode
7K Followers 1K Following I make open source dev tools at https://t.co/lrm2L4TahM like mise, aube, fnox, hk, pitchfork. Previously I wrote the heroku cli and oclif. ex-amazon/meta.
Nico Waisman @nicowaisman
13K Followers 977 Following CISO at @XBOW. Former CISO @Lyft. Binary entomologist
Jared Wray @jaredwray
13K Followers 4K Following Hyphen AI https://t.co/QIZ11QyQNZ ☁️ | Investor https://t.co/LkFGQ0X0Yo 🦾 | Open Source https://t.co/xlYW6t1Uag 💥
Matt Biilmann @biilmann
14K Followers 4K Following CEO and Co-founder of Netlify. Builder of things, coiner of terms.
Replit ⠕ @Replit
239K Followers 572 Following Idea to app, fast. Create beautiful, modern web applications at the speed of thought with the power of Replit's AI Agent.
Supabase @supabase
209K Followers 101 Following The Postgres development platform. 🌐 https://t.co/kHsst88XA1 ⭐️ https://t.co/txGagqok1i 🎥 https://t.co/6eTjCTIrzK 💬 https://t.co/ikFm89oPVI
Ruxandra Fediuc 👩�... @ruxandrafed
3K Followers 889 Following 👩💻 Principal Architect @viralnationinc - ☁️ Google Professional Cloud Architect - 💻 Certified Kubernetes Administrator - 💡AWS Solutions Architect
Jamieson O'Reilly @theonejvo
24K Followers 2K Following Hacker. T̶h̶i̶n̶k̶i̶n̶g̶ Doing outside the box. Founder @d_vuln Frontier offense & defence @tryaether_ai Building privacy enhancing tech @getprivt
Broooooklyn @Brooooook_lyn
7K Followers 1K Following Creator of the https://t.co/iUjhVUIsRc | @voidzerodev @deploytovoid
Matthew Prince 🌥 @eastdakota
338K Followers 298 Following A little bit geek, wonk, and nerd. Repeat entrepreneur, recovering lawyer, and former ski instructor. Co-founder & CEO of Cloudflare (NYSE: NET).
Mitchell Hashimoto @mitchellh
229K Followers 154 Following Co-founder of @Superlogical. Creator of Ghostty. 👻 Prev founded @HashiCorp, created Vagrant, Terraform, Vault, and others.
Kirk @KirkDerpca
332 Followers 275 Following Kirk from https://t.co/yKnARcddwy Security Research - We like the internet. @adam_networks
Kevin Deng 🦋 @sxzz... @sanxiaozhizi
9K Followers 642 Following Gen Z 🏳️🌈 ✦ @vuejs @vite_js @vueuse @unjsio team member ✦ 🦋 @sxzz.dev • 🐘 @[email protected]
nunomaduro @enunomaduro
68K Followers 386 Following staff software engineer at @laravel · speaker · content creator · open-source contributor · created @pestphp, pint, pail, larastan, and more.
Low Level @LowLevelTweets
54K Followers 2K Following i make computer do bad 🧙 security researcher 📺 1M+ youtube prev: fuzzers & hypervisors @microsoft Business: [email protected]
Andy Greenberg (@agre... @a_greenberg
72K Followers 1K Following WIRED writer, author of SANDWORM and now TRACERS IN THE DARK: The Global Hunt for the Crime Lords of Cryptocurrency. Andy.01 on Signal. [email protected]
Juliano Rizzo @julianor
10K Followers 2K Following Crypto. Security. BEAST/CRIME SSL/TLS, Padding Oracle Attacks. CEO & Founder @coinspect
OpenAI @OpenAI
5.4M Followers 4 Following OpenAI’s mission is to ensure that artificial general intelligence benefits all of humanity. We’re hiring: https://t.co/dJGr6LgzPA
JLarky @JLarky
11K Followers 994 Following Opinions are not my own. As soon as I say something I become new me who hates anything old me did. CEO of HTMX, ex-YC, ex-LegalZoom
Ayush Anand @Securityinbits
2K Followers 340 Following Detection engineering, threat hunting, malware analysis. One defender bit at a time.
Kartik Singh @omnigodzzz
369 Followers 502 Following Security Researcher | CVE-2025-27607 | CVE-2025-27510
Tanya N @Answerislove2
839 Followers 1K Following Building Net Ward: open-source bot deflection for small HTTP services. Dragon Eye in production. Building practical tools for small operators.
OpenAI Developers @OpenAIDevs
430K Followers 1 Following Official updates for developers building with Codex & the OpenAI Platform • Service status: https://t.co/kZwnwdYYEq
Tanner Linsley @tannerlinsley
113K Followers 816 Following ⚔️ Creator of @Tan_Stack 🏝️ TypeScript 🌎 Web ⚛️Open Source Software💡UI/UX/DX 💼Co-Founder @NozzleIO 👨👩👧👦@Ch_JesusChrist
Python Package Index @pypi
23K Followers 10 Following The Python Package Index (PyPI) is the repository of software for the Python programming language. Pronounced 🥧 🫛 👁️
Awesome Agents @awagents
779 Followers 118 Following AI breaking news, hands-on reviews, model deep-dives, and cutting-edge research.
Jake Bleiberg @JZBleiberg
4K Followers 2K Following Cybersecurity and hacking reporter for @business | [email protected] | Signal: JakeBleiberg.24 | Proud @AP alum
Kevin Collier @kevincollier
26K Followers 4K Following I cover digital threats @nbcnews. From WV. Dormant account. Try https://t.co/9UJdWRwcOS. [email protected], signal: kevincollier.01.
Alex Matrosov @matrosov
20K Followers 2K Following Security REsearch @Anthropicai · Breaking & Fixing AI Failure Modes | Founder @binarly_io · @SBOM_Tools · @REhints | Author “Rootkits & Bootkits" (https://t.co/1wd2dfYHY6)Trends for United States
You might like
