🧰 Socket Threat Research

The items that name it 4

• ♫Why♥Not♪ (@Python_s_) on X
  advisory2026-10-09It is written here as Socket Threat Research (Socket; disclosed the compromise and detected the malicious release about 11 minutes after publication).

  Socket; disclosed the compromise and detected the malicious release about 11 minutes after publication

• 16 Malicious Firefox Extensions Steal Cryptocurrency Wallet Credentials
  writeup2026-10-07

  Identified and analyzed the 16 malicious Firefox extensions and attributed them to a continuing campaign

• Socket: npm Package Uses Prompt Injection + Token Flooding to Evade AI Malware Scanners
  writeup2026-06-17

  Security research team that identified and analyzed the shai_hulululud package, deobfuscated its payload, and classified it as protestware/potentially unwanted behavior.

• Socket: Coruna Respawned
  writeup2026-05-22

  Detected the npm package compromise signals and performed the technical analysis published in this report