Tag
socket-dev
Safeguard articles tagged "socket-dev" — guides, analysis, and best practices for software supply chain and application security.
14 articles
AI Security
Security scanning for MCP servers and AI agent tool use
MCP servers give AI agents direct tool access, but most ship unvetted. Here's how security scanning catches tool poisoning and rug-pull attacks.
May 7, 20267 min read
Tool Reviews
Socket.dev: Detecting Supply Chain Attacks Before They Hit
A review of Socket.dev's approach to supply chain security, focusing on behavior analysis of npm packages, install script detection, and typosquatting prevention.
Aug 22, 20235 min read