Company

Socket

2 articles First covered Apr 20, 2026, latest Apr 23, 2026

Bitwarden CLI compromised by the Shai-Hulud npm worm

Bitwarden CLI got backdoored for 90 minutes. The worm calls itself 'Shai-Hulud: The Third Coming.'

A malicious @bitwarden/[email protected] hit npm on April 22. The payload steals npm tokens, cloud secrets, and Claude Code credentials, then self-replicates.

GitHub OG card for the StarScout research repository from Carnegie Mellon

Open Source·3 days ago

Inside GitHub's fake star economy: 6 million bought stars and how to spot them

A Carnegie Mellon study counted 6 million suspected fake stars across 18,617 GitHub repos. Here's what the StarScout research actually found and how to read a star count now.