https://cybertoolchain.io/tools/socket New releases and features in Socket, tracked by The Cyber Toolchain. en Mon, 02 Nov 2026 17:22:00 GMT https://socket.dev/changelog/organization-alerts-can-now-track-multiple-branches?utm_medium=feed https://socket.dev/changelog/organization-alerts-can-now-track-multiple-branches?utm_medium=feed Mon, 02 Nov 2026 17:22:00 GMT Socket now tracks multiple branches per repository for organization-wide alerts, supporting glob patterns and up to 5 branches per repo⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • API users can now track non-default branches by setting the `branch` and `set_as_pending_head` fields when creating a full scan.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Organization-wide alerts now track multiple branches per repository (up to 5), with alerts broken down by label, repository, and branch in the dashboard. • Add tracked branches using plain names or glob expressions via Settings -> Scans -> Tracked Branches to receive alerts, webhooks, and email notifications across branches such as beta, canary, or legacy. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog https://socket.dev/changelog Thu, 29 Oct 2026 07:55:00 GMT Socket schedules the removal of the `GET /v0/report/view/{id}` endpoint and changes 'Obfuscated code' alert defaults on November 10⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Migrate report view calls from the deprecated `GET /v0/report/view/{id}` endpoint to `GET /v0/orgs/{org_slug}/full-scans/{full_scan_id}` before November 20, 2026 — the old endpoint now advertises its retirement in a `Sunset` response header.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Keep 'Obfuscated code' alerts after November 10 by opening Security Policy and setting 'Obfuscated code' to 'Warn' or 'Monitor' instead of 'Inherit', or by adding a matching rule on the Policies page — the alert will be removed from the 'Balanced' and 'Comprehensive' preset defaults on that date. Breaking changes: • The `GET /v0/report/view/{id}` endpoint is retired on November 20, 2026; integrations using it must switch to `GET /v0/orgs/{org_slug}/full-scans/{full_scan_id}`. • The 'Obfuscated code' alert is removed from the 'Balanced' and 'Comprehensive' security policy presets on November 10, 2026; organizations relying on preset defaults will stop receiving this alert unless they explicitly set it to 'Warn' or 'Monitor'. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/obfuscated-code-alert-defaults-updated?utm_medium=feed https://socket.dev/changelog/obfuscated-code-alert-defaults-updated?utm_medium=feed Tue, 27 Oct 2026 23:10:10 GMT Breaking changes: • The 'Obfuscated code' alert is removed from the 'Balanced' and 'Comprehensive' security policy presets on November 10, 2026; organizations relying on preset defaults will no longer receive these alerts unless they explicitly set 'Obfuscated code' to 'Warn' or 'Monitor' via Settings → Security Policy or the Policies page. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog https://socket.dev/changelog Wed, 21 Oct 2026 07:52:02 GMT Socket: Adds `token_prefix` and `token_last4` fields to token-list API responses, allowing key identification without parsing the masked display string.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Async endpoints for starting a fix computation and polling for results are now documented in the Fixes API, supporting `supported parameters` and result format to avoid timeouts on large projects or first runs. • Adds repository access checks before computing or returning fixes for user OAuth sessions governed by repository or workspace policies, returning 403 for unfiltered repository endpoints. • Adds current-role checks for OAuth requests so that role changes take effect on the next request, including for linked service-account requests. • Organization settings are now accessible directly from the `Settings` link at the bottom of the dashboard sidebar. Breaking changes: • API keys now use a new consistent masked format (e.g. `sktsec_…Xy9Q`); integrations that parse the previous masked format may need updating. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/faster-bulk-ticket-creation-for-manifest-alerts?utm_medium=feed https://socket.dev/changelog/faster-bulk-ticket-creation-for-manifest-alerts?utm_medium=feed Tue, 20 Oct 2026 03:18:00 GMT Socket adds bulk ticket creation for manifest alerts across Jira, Linear, Asana, and ClickUp, with shift-click range selection.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Bulk-create Jira, Linear, Asana, and ClickUp tickets for manifest alerts (e.g.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ 'Missing lockfile'), one ticket per repository and manifest file, scoped to the selected repository and branch. • Shift-click to select a range of alerts for bulk actions. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/oauth-access-stays-in-sync-with-role-changes?utm_medium=feed https://socket.dev/changelog/oauth-access-stays-in-sync-with-role-changes?utm_medium=feed Thu, 15 Oct 2026 05:26:00 GMT Socket OAuth access now enforces current role permissions on every request, so role changes take effect immediately.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • For organizations with current-role checks enabled, OAuth token requests now validate both the token's granted scopes and the user's current role permissions, with role changes taking effect on the next request.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Linked service-account OAuth requests now check current service-account permissions alongside granted token scopes. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog https://socket.dev/changelog Mon, 31 Aug 2026 07:40:38 GMT Socket adds Asana alert ticketing, PHP/Composer beta support, and Firefox extension scanning • New Asana integration lets teams create and manage Asana tasks from Socket alerts, either manually or via ticketing rules that filter by event, type, priority, and repository — with configurable sync between task and alert status; available in beta on Business and Enterprise plans. • PHP and Composer support promoted from Experimental to Beta and now available to all Socket users; PHP reachability analysis is generally available for Team plan customers and above without requiring Experimental access. • New Firefox extension scanning covers every extension in Mozilla's official add-ons directory, monitoring for permission changes, network activity, malware, credential and clipboard theft, data exfiltration, remote loading, obfuscation, and impersonation; available in Experimental for Enterprise customers. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/asana-integration?utm_medium=feed https://socket.dev/changelog/asana-integration?utm_medium=feed Tue, 25 Aug 2026 20:24:59 GMT Socket adds Asana integration (beta) for creating and managing tasks from alerts via manual action or ticketing rules. • Adds Asana integration (beta, Business and Enterprise plans) to create and manage Asana tasks directly from Socket alerts. • Supports ticketing rules that filter alerts by event, type, priority, repository, and other attributes to automate Asana task creation. • Allows configuring Asana workspace, project, tags, and assignee per ticketing rule, with bi-directional status sync between linked tasks and alerts. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/php-and-composer-support-beta?utm_medium=feed https://socket.dev/changelog/php-and-composer-support-beta?utm_medium=feed Fri, 21 Aug 2026 20:35:00 GMT Socket PHP and Composer support graduates to Beta with reachability analysis now GA for Team plans • PHP and Composer support is now in Beta and available to all Socket users (previously Experimental). • PHP reachability analysis is now generally available for Team plan customers and above, with no Experimental access required — includes precomputed reachability and full application reachability. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/firefox-extension-protection?utm_medium=feed https://socket.dev/changelog/firefox-extension-protection?utm_medium=feed Thu, 20 Aug 2026 20:42:00 GMT Socket adds Firefox extension scanning, covering permissions, network activity, malware, and exfiltration behaviors across Mozilla's add-ons directory. • Scans every Firefox extension listed in Mozilla's official add-ons directory, monitoring new releases for changes in permissions, code, network activity, and behavior. • Detects malware, credential and clipboard theft, data exfiltration, remote loading, obfuscation, impersonation, and related campaign activity in Firefox extensions. • Firefox extension coverage is available in Experimental for Enterprise customers — contact your Socket account team to enable it. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/packagist-package-pages-now-surface-force-pushed-tags?utm_medium=feed https://socket.dev/changelog/packagist-package-pages-now-surface-force-pushed-tags?utm_medium=feed Mon, 06 Jul 2026 04:03:00 GMT Socket now surfaces full commit history for force-pushed Packagist tags, highlighting the current and prior commits. • Displays full commit history for force-pushed tags on Packagist package pages, with the currently associated commit highlighted. • Enables review of commits a package version previously referenced before a tag was overwritten. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/ai-reviewed-reachability-specifications?utm_medium=feed https://socket.dev/changelog/ai-reviewed-reachability-specifications?utm_medium=feed Tue, 30 Jun 2026 02:47:00 GMT Socket adds opt-in AI-generated reachability specs to expand vulnerability reachability coverage beyond human-verified rules. • Adds opt-in AI-reviewed reachability specifications that extend reachability verdicts to vulnerabilities not yet covered by human-verified specs. • New Specification field in alert details surfaces whether a reachability result was produced by an AI-generated or human-verified specification. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/redesigned-organization-switcher-for-faster-navigation?utm_medium=feed https://socket.dev/changelog/redesigned-organization-switcher-for-faster-navigation?utm_medium=feed Mon, 29 Jun 2026 04:22:00 GMT Socket's organization switcher now surfaces Settings and orgs upfront, with a searchable All Organizations view. • Redesigned organization switcher surfaces Settings and organizations at the top level for faster access. • New searchable All Organizations view for users belonging to multiple organizations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/alert-titles-added-to-csv-exports?utm_medium=feed https://socket.dev/changelog/alert-titles-added-to-csv-exports?utm_medium=feed Tue, 23 Jun 2026 04:28:00 GMT Socket CSV exports now include a human-readable Alert Title column and more consistent Upgrade Version values. • Adds a human-readable Alert Title column to Alerts CSV exports, enabling direct CVE identification without cross-referencing the dashboard. • Populates Upgrade Version values more consistently in vulnerability alert CSV exports. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/alert-titles-added-to-csv-exports https://socket.dev/changelog/alert-titles-added-to-csv-exports Tue, 23 Jun 2026 04:28:00 GMT Socket adds an Alert Title column to CSV exports for easier CVE identification. • CSV exports now include a human-readable `Alert Title` column for vulnerability alerts Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/socket-mcp-org-alerts-threat-feed-package-inspection https://socket.dev/changelog/socket-mcp-org-alerts-threat-feed-package-inspection Thu, 18 Jun 2026 21:34:00 GMT Socket MCP adds org alerts, threat feed querying, and authenticated package inspection • Adds organization-level alert review with filtering by severity or repository • Enables querying the Socket threat feed by ecosystem, category, and time window • Allows listing, reading, and searching published package artifacts without local installation • Connects package findings to affected repositories and organization alerts • Supports authentication for org alerts and threat feed; depscore remains public Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/socket-firewall-support-vs-code-open-vsx https://socket.dev/changelog/socket-firewall-support-vs-code-open-vsx Wed, 17 Jun 2026 21:32:00 GMT Socket Firewall now filters and blocks flagged VS Code/Open VSX extensions via marketplace proxying. • Adds `Socket Firewall` support for VS Code and Open VSX to filter flagged extensions from marketplace results. • Enables blocking at extension asset and VSIX download URLs in the Socket Firewall closed beta. • Supports deployment through editor configuration, DNS override, or enterprise egress forwarding. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/manifest-alerts-for-missing-lockfiles https://socket.dev/changelog/manifest-alerts-for-missing-lockfiles Tue, 16 Jun 2026 21:21:00 GMT Socket introduces Manifest Alerts for missing lockfiles with Jira/Linear integration • Adds `Manifest Alerts` view to scan results for detecting missing lockfiles in application and project repositories • Supports impact details and remediation for npm, pnpm, yarn, and bun ecosystems when a manifest lacks a corresponding lockfile • Adds controls to ignore/restore Manifest Alerts and create Jira or Linear tickets directly from the alert Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/add-firewall-events-data-export?utm_medium=feed https://socket.dev/changelog/add-firewall-events-data-export?utm_medium=feed Tue, 16 Jun 2026 15:27:39 GMT Socket Firewall now supports exporting event logs to external data sources via the new Data Export integration. • Enables export of Socket Firewall telemetry event logs to external data sources through a new Data Export integration. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/add-firewall-events-data-export https://socket.dev/changelog/add-firewall-events-data-export Tue, 16 Jun 2026 15:27:39 GMT Socket adds UI step to export Firewall telemetry event logs to external integrations • Adds UI path Settings > Data Export > Create Integration for exporting Socket Firewall telemetry events Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/obfuscated-code-alerts-now-default-to-monitor https://socket.dev/changelog/obfuscated-code-alerts-now-default-to-monitor Tue, 16 Jun 2026 05:26:00 GMT Socket changes default standalone obfuscated code alerts to Monitor instead of Warn. • Sets the default severity for standalone Obfuscated Code alerts to `Monitor` rather than `Warn`, reducing noise while keeping malicious detections via malware and protestware alerts. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/packagist-packages-now-show-daily-download-trends https://socket.dev/changelog/packagist-packages-now-show-daily-download-trends Sun, 14 Jun 2026 02:03:00 GMT Packagist package pages now display a daily downloads chart powered by Packagist stats. • Adds a daily downloads chart to Packagist package pages to show adoption over time. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/crates-package-pages-now-show-daily-download-trends https://socket.dev/changelog/crates-package-pages-now-show-daily-download-trends Sat, 13 Jun 2026 01:55:00 GMT Socket crates.io package pages now display daily download metrics and trend graphs. • Crates package pages on Socket.dev now include daily download metrics sourced from crates.io • Daily download trends visualization is added to crate package pages for adoption analysis Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/bulk-assign-repository-labels-with-csv-import https://socket.dev/changelog/bulk-assign-repository-labels-with-csv-import Sat, 06 Jun 2026 02:11:00 GMT New CSV import feature for bulk-assiging repository labels in Socket • Adds CSV import capability to the Repositories → Labels page for bulk label assignment Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/surface-go-retraction-and-pypi-yank-warnings https://socket.dev/changelog/surface-go-retraction-and-pypi-yank-warnings Thu, 04 Jun 2026 03:15:00 GMT Socket updates its UI to highlight risky package versions in Go and PyPI repositories. • Adds a warning banner on Go and PyPI package pages when a version is retracted or yanked Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/surface-package-keywords-for-github-actions-and-packagist https://socket.dev/changelog/surface-package-keywords-for-github-actions-and-packagist Wed, 03 Jun 2026 22:27:00 GMT Socket displays package keywords and marketplace categories for GitHub Actions and Packagist packages. • Displays package keywords on GitHub Actions and Packagist package pages to provide more context. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/update-composer-package-metadata https://socket.dev/changelog/update-composer-package-metadata Tue, 02 Jun 2026 22:12:00 GMT Composer package pages now show a Homepage link when available. • Displays a `Homepage` link on Composer package pages when project metadata is present and differs from the repository URL. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/show-openvsx-publishers-and-repository-links https://socket.dev/changelog/show-openvsx-publishers-and-repository-links Sun, 31 May 2026 03:26:00 GMT OpenVSX package pages now display publisher info and source repository links • Adds publisher name to the maintainers view and overview metadata for OpenVSX package pages Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/add-openvsx-categories-compatibility-and-homepage-metadata https://socket.dev/changelog/add-openvsx-categories-compatibility-and-homepage-metadata Sun, 31 May 2026 03:22:00 GMT Socket now displays OpenVSX categories, compatibility, and homepage metadata on package pages. • OpenVSX extension categories are now visible on Socket package pages • VS Code version compatibility information is displayed for OpenVSX extensions • Homepage links are shown for OpenVSX extensions when available Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/surface-chrome-web-store-user-counts https://socket.dev/changelog/surface-chrome-web-store-user-counts Fri, 29 May 2026 22:24:00 GMT Socket Surface now displays Chrome Web Store active-user counts on extension package pages, separating them from download metrics to aid popularity evaluation. • Socket Surface now displays Chrome Web Store active-user counts on extension package pages, separating them from download metrics to aid popularity evaluation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/add-duplicate-redirect-support-to-diff-scan-creation https://socket.dev/changelog/add-duplicate-redirect-support-to-diff-scan-creation Thu, 21 May 2026 03:43:00 GMT Adds `on_duplicate=redirect` support to POST /v0/orgs/{org_slug}/diff-scans/from-ids for handling duplicate scans • `POST /v0/orgs/{org_slug}/diff-scans/from-ids` returns a 302 Found response with a `Location` header pointing to the existing diff scan when `on_duplicate=redirect` is set and a duplicate scan exists Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/add-relative-date-filters-to-vulnerabilities-and-scans https://socket.dev/changelog/add-relative-date-filters-to-vulnerabilities-and-scans Tue, 19 May 2026 03:51:00 GMT Adds relative date filters (e.g., “1 week ago”) to Vulnerabilities and Scans pages in Socket UI. • Supports relative date presets like "1 week ago" and "1 month ago" on Vulnerabilities and Scans pages • Adds a Detected date filter specifically for the Vulnerabilities page • Adds created-date filtering with custom calendar options and before/after operators to the Scans page Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/campaign-pages-now-show-artifact-identifiers https://socket.dev/changelog/campaign-pages-now-show-artifact-identifiers Fri, 15 May 2026 04:01:00 GMT Campaign pages now display artifact identifiers for affected packages to distinguish identical versioned distributions. • Adds artifact identifiers (e.g., PyPI wheel tags, Maven jar qualifiers) to campaign pages under each affected package. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/add-html-url-to-repository-api-responses https://socket.dev/changelog/add-html-url-to-repository-api-responses Fri, 01 May 2026 04:20:00 GMT Repository API responses now include html_url pointing to the Socket dashboard. • Adds `html_url` field to repository API responses (get, list, create, update) linking to the Socket dashboard Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/add-security-policy-confirmations-and-json-copy-actions-in-the-dashboard https://socket.dev/changelog/add-security-policy-confirmations-and-json-copy-actions-in-the-dashboard Thu, 30 Apr 2026 04:16:00 GMT Adds security policy confirmations and 'Copy JSON' button in the dashboard • Security Policy now requires confirmation before removing custom alert settings or switching presets when custom overrides are present. • Firewall event details include a 'Copy JSON' button to copy the full event body. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/add-security-settings-for-active-sessions https://socket.dev/changelog/add-security-settings-for-active-sessions Thu, 30 Apr 2026 04:12:00 GMT Socket introduces a Security tab within User Preferences for managing active user sessions. • Adds a new 'Security' tab in the User Preferences UI to view and terminate active account sessions Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/added-gradle-version-catalog-support-for-sbom-generation https://socket.dev/changelog/added-gradle-version-catalog-support-for-sbom-generation Sat, 11 Apr 2026 02:49:00 GMT Socket adds Gradle Version Catalog (libs.versions.toml) support for SBOM generation fallback. • Adds parsing of `libs.versions.toml` files during SBOM generation to improve dependency detection for Gradle projects without lockfiles. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/updated-default-policy-settings-for-ai-detected-potential-malware https://socket.dev/changelog/updated-default-policy-settings-for-ai-detected-potential-malware Fri, 03 Apr 2026 15:53:18 GMT Socket updates default actions for AI-detected potential malware alerts to warn across all policies, with future block capability. • Sets the default action for 'AI-detected potential malware' alerts to 'warn' in low noise, default, and higher noise security policies Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/markdown-rendering-for-supply-chain-attack-descriptions https://socket.dev/changelog/markdown-rendering-for-supply-chain-attack-descriptions Fri, 27 Mar 2026 03:40:00 GMT Adds Markdown rendering to Supply Chain Attack Descriptions in public and dashboard views. • Supply chain attack campaign descriptions now support Markdown formatting (bold text, links, lists, code blocks) across both public and dashboard views. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/sync-individual-github-installations https://socket.dev/changelog/sync-individual-github-installations Thu, 26 Mar 2026 03:37:00 GMT Adds ability to sync individual GitHub app installations from Dashboard UI and clarifies global sync scope. • Adds UI option to sync a single GitHub installation via Dashboard → Integrations → GitHub • Clarifies that the 'Sync all GitHub installations' button syncs every linked organization installation Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/scan-scores-in-api-responses https://socket.dev/changelog/scan-scores-in-api-responses Tue, 24 Mar 2026 04:49:00 GMT Socket API now includes scan scores in streaming events and supports detailed score breakdowns via query parameter • Streaming full-scan data now includes a `scores` event type containing score details • Adds `?include_score_details` query parameter to view components of full-scan scores Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/improved-mobile-experience-for-attack-campaign-pages https://socket.dev/changelog/improved-mobile-experience-for-attack-campaign-pages Tue, 24 Mar 2026 04:17:00 GMT Improved mobile usability for public supply chain attack campaign pages. • Updated public supply chain attack campaign pages for better mobile usability, including layout and readability improvements. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/improved-package-search-result-display-in-the-overlay https://socket.dev/changelog/improved-package-search-result-display-in-the-overlay Thu, 05 Mar 2026 05:26:00 GMT Improved package search overlay behavior with conditional 'View all' and accurate footer counts. • The package search overlay now shows the “View all” option only when more than 20 results are available. • The result list behaves more consistently when exact matches or empty states are shown. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/preserved-file-paths-when-switching-package-versions-and-artifacts https://socket.dev/changelog/preserved-file-paths-when-switching-package-versions-and-artifacts Mon, 02 Mar 2026 05:43:00 GMT Package file navigation preserves current path when switching versions or artifacts • Updated package file navigation to preserve the current file path when switching between package versions or artifacts. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/fixed-empty-workspace-parameter-handling-for-repository-scans https://socket.dev/changelog/fixed-empty-workspace-parameter-handling-for-repository-scans Fri, 27 Feb 2026 05:40:00 GMT Socket fixes workspace parameter handling to allow omitting or passing an empty value for default workspace scans • Omitting the `workspace` parameter now correctly targets the default-workspace repository for full or diff scans Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/new-summarize-with-ai-links-to-blog-posts https://socket.dev/changelog/new-summarize-with-ai-links-to-blog-posts Thu, 26 Feb 2026 05:54:00 GMT Socket adds 'Summarize With AI' links to blog posts for quick TL;DR via external AI assistants. • Adds 'Summarize With AI' links to blog posts to enable skimming content via ChatGPT, Perplexity, Gemini, Grok, or Claude with pre-filled prompts. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/added-generic-bucket-export-integration https://socket.dev/changelog/added-generic-bucket-export-integration Sat, 14 Feb 2026 04:33:00 GMT Socket adds generic bucket export integration supporting AWS S3, GCS, Azure Blob with CSV/JSON/Parquet formats. • Adds `aws_s3` bucket support for generic alert data export • Adds `google_cloud_storage` (GCS) bucket support for generic alert data export • Adds `azure_blob_storage` bucket support for generic alert data export • Adds `csv`, `json`, and `parquet` output format support for bucket exports Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/display-scan-type-indicator-on-sbom-report-page https://socket.dev/changelog/display-scan-type-indicator-on-sbom-report-page Sat, 14 Feb 2026 01:52:00 GMT SBOM report pages now display a scan type indicator in the header. • Adds a scan type indicator to SBOM report pages for visibility into scan origin (e.g., Socket, CLI, GitHub). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/new-scan-type-column-and-filtering-in-full-scans https://socket.dev/changelog/new-scan-type-column-and-filtering-in-full-scans Fri, 13 Feb 2026 01:40:00 GMT New Scan Type column and filtering in Full Scans UI and API to distinguish socket, tier1, or basics scans. • Adds `Scan Type` column and filtering support (socket, tier1, basics) in the Full Scans page for clearer visibility. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket https://socket.dev/changelog/new-triage-page-in-organization-settings https://socket.dev/changelog/new-triage-page-in-organization-settings Thu, 05 Feb 2026 01:30:00 GMT Socket introduces a centralized UI for organization-level triage policy management. • The new Triage page consolidates visibility of PURL-based and Alert Key-based rules. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/socket