Socket web extension – free NPM supply chain protection

In plain words

Socket web extension is a free browser extension for Chromium and Firefox that helps developers check the security of NPM packages before using them. It scans packages for malware, vulnerabilities, code smell, and unwanted behavior using AI and static analysis. The extension integrates directly into the browser, allowing developers to quickly assess supply chain risks when reviewing dependencies during development.

written from the facts on this page · September 2026

From the sources

In the maker’s words, at launch

Hey HN, I'm Arjun, an 18-year-old intern at Socket. I've been working on a project that I'm really excited to share with you all - a browser extension that makes it easier to check the security of NPM packages before you use them. You can try the extension on any Chromium-based browser or on Firefox. Chrome…

• 
  Socket – Secure your JavaScript supply chain2022 · socket.dev · ▲133

  Excited to share the project I've been working on for the past 7 months! We've seen nearly weekly attacks against the open source software supply chain. I saw the seeds of this trend start in the mid 2015s as an open source maintainer and I've watched it only get worse over the years. I finally decided to try to solve this problem. Socket is taking an entirely new approach to one of the hardest problems in security in a stagnant part of the industry that has historically been obsessed with just reporting on known vulnerabilities. Unlike other scanning tools, Socket actually analyzes the…

• 
  Socket2022 · socket.dev · ▲211

  Secure your JavaScript supply chain

• 
  Socket for GitHub 1.02022 · socket.dev · ▲91

  Secure your JavaScript supply chain – block malware packages

• 
  I made a CLI tool to create web extensions with no build configuration2024 · github.com · ▲381

  Hello HN! I'm the creator and solo developer of Extension.js, a development tool for browser extensions with built-in support for TypeScript, WebAssembly, React, and modern JavaScript. Developers use it to spend less time configuring the compilation config or learning new frameworks and more time actually writing code. Most projects similar to Extension.js rely on some sort of abstraction or configuration to get started, making the initial development process slow given the extra learning curve and setup guidelines. By using Extension.js, adding the package to your npm scripts is all it…

• 
  Web3 Antivirus Extension 2.02024 · web3antivirus.io · ▲140

  Bring confidence and security to your Web3 transactions

• 
  Extension Boilerplate2017 · ▲325

  Build cross browser extensions for Chrome, Firefox & Opera

• 
  /dev/null▲472

  a social network for devs

  Dev tools · 2d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 27d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 25d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 22d ago · openbot.run

• 
  Talanoa▲340

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 20d ago · talanoa.email

• 
  CoreSpeed▲332

  One MCP for everything your agents need: apps, memory, tools

  Dev tools · 27d ago · corespeed.io

• 
  Clustr▲1,526

  The reality check for your crypto portfolio

  Commerce · 2023 · clustr.io

• 
  Workout.lol – a web app to easily create a workout routine▲993

  Hey everyone, I here is a small open-source project I've been working on lately. I'd love to hear your thoughts and improvement ideas :) GitHub: [github.com/Vincenius/workout-lol](https://github.com/Vincenius/workout-lol)

  Dev tools · 2023 · workout.lol

• HN
  Hacker News user blogroll▲937

  I saw this [0] pretty cool thread by user revskill, and wanted a quicker way to search through it, but also to keep them all in one place so I can read them at my leisure whenever I get time. Right now is like 60 lines of Ruby using Nokogiri, but I will certainly look into it further down the line and improve the list. There's a cronjob checking the thread every 12 hours but I will eventually shut that down and it will become static after that. There are some really awesome blogs in there. I really recommend going through the list, it made my day. [0] "Could you share your personal blog…

  Life & fun · 2023 · dm.hn

• 
  Lazy▲928

  One ⌘ shortcut to capture anything straight to Notion

  AI · 2023 · lazy.so

• 
  Anytype - Public Beta▲907

  Anytype is built on the open-source AnySync protocol: a local-first protocol based on CRDTs. Users of Anytype can create spaces - graph-based databases with modular UI. Each space has unique access rights. Today, Anytype's beta is in single-player mode. Multiplayer mode, which will support local-first collaboration between multiple users, will be launched in the first half of 2024. Anytype fulfils the seven ideals of local first software from here - https://www.inkandswitch.com/local-first/ , our team felt these things are important to all of us: • No spinners: your work…

  Commerce · 2023 · anytype.io

• 
  n8n 1.0▲786

  Workflow automation for technical people

  Dev tools · 2023 · n8n.io