Socket is the #1 software supply chain security platform. Next-gen SCA + SBOM + 0-day prevention. LOVED BY DEVELOPERS. đź‘€ @npm_malware
- Tweets 3,497
- Following 4,611
- Followers 23,398
- Likes 2,531
Pinned Tweet
Today is a big day for Socket.
Today is a big day for @SocketSecurity. We just raised a $60M Series C at a $1B valuation, led by @ThriveCapital with participation from @a16z, @AbstractVC, and @CapitalOne Ventures. Total funding is now $125M.
Four years ago, we started Socket because open source dependencies were flowing into production faster than anyone could vet them. AI has massively accelerated that. Code is being written, shipped, and deployed before any human reads it. Security has to operate at that same speed.
One data point from Thrive's diligence that I keep coming back to: they first discovered Socket because @cursor_ai, @OpenAI, and @AnthropicAI all independently told them it was the most important security tool they'd adopted for AI-driven development. Three of the most sophisticated AI companies converging on the same vendor unprompted.
Since our Series B, Socket has grown to more than 20,000 organizations, protecting over 1.5 million repositories and blocking more than 1,000 supply chain attacks every week. The team is now over 100 people.
Three out of five FAANG companies are Socket customers. So are the companies building the most ambitious AI products:Â @AnthropicAI, @cursor_ai, @xai, @figma, @vercel, @Replit, @scale_AI, @GustoHQ, @Mercadolibre, and @cribl_io, alongside Fortune 100s in financial services and global media.
What we've shipped since the last round:
• Socket Firewall blocks malicious packages at install time, before they reach a developer's laptop or CI pipeline. Free for everyone.
• Reachability analysis via our acquisition of Coana, eliminating 50-80% of irrelevant vulnerability alerts by focusing only on CVEs that are actually exploitable.
• Socket Certified Patches for remediating exploitable CVEs in seconds without waiting on upstream maintainers.
• Coverage extending to browser extensions, editor extensions, MCP servers, and AI tools via our acquisition of @secureannex.
When the Axios compromise hit, our detection systems flagged the malicious dependency within six minutes. Within 24 hours, more than 2,000 organizations onboarded to Socket to block it.
Where the funding goes: deeper investment in Firewall, massively expanding Certified Patches, moving protection closer to every point of install across the developer toolchain, and new product launches pushing Socket into a category we haven't entered before.
We're hiring across engineering, sales, customer success, and threat intel.
❤️ Thank you to our customers, investors, and the open-source community for your support. Together, we’re making software safer for everyone.
5
6
106
Socket retweeted
New Investigation: Socket tracked 319 browser extensions installed by 13.4M users over a decade, routing queries through operators’ servers for Yahoo and Bing referral payments.
They promise PDF tools and safer searches, then take over your search engine. socket.dev/blog/searchjacked
7
21
I often get people telling me their parents have installed these search hijackers (definitely not @internet_meme) but they have also ended up in nearly every large organization I've worked with. Call it a PUP but the scale + breadth over time warrants a real conversation.
New Investigation: Socket tracked 319 browser extensions installed by 13.4M users over a decade, routing queries through operators’ servers for Yahoo and Bing referral payments.
They promise PDF tools and safer searches, then take over your search engine. socket.dev/blog/searchjacked
1
3
10
✍️ The full report: socket.dev/blog/firefox-wall…
1
1
Socket now protects the world's largest company. That makes two of the Fortune 5 and ten of the Fortune 100.
Developers, build servers, and AI agents install packages faster than anyone can review them. Socket checks what each one does before it's installed.
11
6
127
Socket retweeted
I want to echo this as someone who's been riding Socket for a while: this shit is the bee knees. Myself and a few others find this tool to be high signal low noise time to value. Linux values on package management.
1
2
9
Socket uncovered malicious Firefox extensions impersonating Phantom, Jupiter, and Bitget to steal recovery phrases and private keys. The fake Phantom wallet also bundled the operator’s backend for automatically draining funds.
socket.dev/blog/firefox-wall…
9
20
Socket retweeted
🚀 Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization.
Campaign summaries bring together repository scans and Firewall activity, so you can quickly check your organization’s exposure.
1
6
15
Open a campaign’s Org Impact tab to see:
• Package names and versions
• Repositories and branches
• First and last seen dates
• Links to scan reports and Firewall events
socket.dev/blog/threat-intel…
Node patched eMudhra and Brotli last week, but updating Node only covered part of the problem. Other applications carried their own copies of Brotli or still trusted the compromised certificates, leaving teams with more software to find and fix.
socket.dev/blog/emudhra-brot…
3
10
39
Attackers were stealing secrets from LiteLLM's GitHub org 11 days before the malicious litellm 1.107.0 release.
The trick: push a workflow to a throwaway branch, let on: [push] run it with real secrets, delete the branch. 20 secrets taken, including a GitHub App private key.
socket.dev/blog/litellm-atta…
8
11
73
🚨 New investigation: Socket found malicious LiteLLM workflows running 11 days before the attack, targeting 20 secrets including GitHub, cloud, and AI credentials.
After our disclosure, LiteLLM linked a stolen token to approval of the malicious release.
socket.dev/blog/litellm-atta…
3
12
50
Microsoft made TypeScript roughly 10Ă— faster by porting its compiler and tooling to Go.
Now Cloudflare’s @voidzerodev team is working with the #TypeScript team on tsrs, a Rust port reporting up to 8× faster checks than TS 7.0 and ~70% less memory.
socket.dev/blog/cloudflare-t…
2
15
219