Post

Maintainer compromises used to be rare. Now they’re happening at an alarming rate, as seen in recent attacks. Today we’re giving developers a new layer of defense with Socket Firewall, a free tool that blocks malicious dependencies at install time.

Socket Firewall is super lightweight and works out of the box, with no API key and no configuration required. It protects developer machines in real time, blocking malicious dependencies before they can reach your laptop or build system. socket.dev/blog/introdu...

If you’ve used our “safe npm” tool before, Socket Firewall will feel familiar. It now covers #Python and #Rustlang as well as #JavaScript, with more ecosystems rolling out quickly. This new approach comes with greater flexibility, which allows for more integrations with package managers.