Feross (@feross) / X

Feross

28.9K posts

Feross

@feross

⚡️ Founder + CEO @SocketSecurity (socket.dev) • 🌲 Visiting lecturer @Stanford (cs253.stanford.edu) • ❤️ Open source @WebTorrentApp + @StandardJS

Stanford, CA

Joined August 2008

Pinned
Feross
@feross
Aug 4
🚨 Active supply chain attack on npm: keyv and cacheable are compromised right now, and the payload is a worm. The maintainer account behind both package families was compromised. On August 4, ten packages were republished with a malicious preinstall hook that steals your
Popular npm Packages in the keyv and Cacheable Namespaces Co...
From socket.dev
Feross
@feross
Aug 4
🚀 Socket is now available in the AWS Security Hub Extended plan. For AWS customers, that means you can apply committed AWS spend toward @SocketSecurity, move seats up or down month to month, and consolidate billing with the rest of your security stack. The first month is free.
AWS Security Hub Adds Socket for Supply Chain Security - Soc...
From socket.dev
Feross
@feross
Aug 1
Composer and @packagist serve billions of package installs a year. For most of their history, they've been funded largely by a single company. This week @naderman and @seldaek announced a sponsorship program and @SocketSecurity signed on as a launch sponsor. Here's why. When a
Feross
@feross
Jul 31
“Just use an npm package” @SocketSecurity
Feross
00:00
Feross
Feross
@feross
Jul 30
Socket signed the open letter on open-weight AI models, alongside Microsoft, Google, Meta, OpenAI, and NVIDIA. We're a 100-person startup, and this is one of the few policy letters we've ever signed. @SocketSecurity exists because open ecosystems get attacked. We block 10,000+