@feross

⚡️ Founder + CEO @SocketSecurity (https://xitter.cf/t.co/7g1opA7Tr8) • 🌲 Visiting lecturer @Stanford (https://xitter.cf/t.co/yw9prxLiLe) • ❤️ Open source @WebTorrentApp + @StandardJS

 Stanford, CA
feross.org
Joined August 2008
  • Tweets29.1K
  • Following1.7K
  • Followers41.2K
1.9KMedia
Feross retweeted
tuckner
@tuckner7h
Just used LiteLLM to create my first PHP website. The AI even suggested getting a certificate from eMudhra for HTTPS to protect my login page. The future looks really bright 🥳
96
373
40
6,724
105,303
Feross retweeted
Socket
@SocketSecurity7h
🚨 PHP has released emergency patches for two critical RCE vulnerabilities. Organizations unable to patch are advised to take affected systems offline. Believe it or not, PHP still runs an enormous amount of the web. And nearly half of #PHP sites run EOL versions.
2
23
2
88
6,321
1/4 Today, we’re releasing Mercury 3. Mercury 3 is by far our most powerful model and the most intelligent diffusion LLM ever released. It outperforms GPT-6 Luna and Haiku 5.5 on quality while running at 1000+ tok/sec.
🤖 Made with AI
285
452
224
5,237
456,781
Don't look now, but this is problematic. credential-stealers suck.
Socket
@SocketSecurity9h
🚨 LiteLLM, a Python package for connecting to AI model providers with 92M+ monthly downloads, has been compromised. Version 1.107.0 ships credential-stealing malware through PyPI wheels and Docker images, targeting cloud credentials, developer secrets, and AI tools.
2
5
1
29
8,757
Feross retweeted
Socket
@SocketSecurity9h
Socket flagged all seven malicious wheels within seven minutes of publication. The malware runs at Python startup, even without importing LiteLLM. The release workflow built container images from a lookalike repository. Full analysis: socket.dev/blog/litellm-comp…

LiteLLM PyPI Package and Docker Images Compromised to Steal Cloud and AI Credentials

A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.

socket.dev
2
8
1
72
12,535
Feross retweeted
Socket
@SocketSecurity9h
🚨 LiteLLM, a Python package for connecting to AI model providers with 92M+ monthly downloads, has been compromised. Version 1.107.0 ships credential-stealing malware through PyPI wheels and Docker images, targeting cloud credentials, developer secrets, and AI tools.
88
268
148
1,560
212,000
We just raised a $60M Series B at a $1B valuation to build @daytonaio into the Agent Cloud. @FirstMarkCap led the round, with all key existing investors and angels doubling down. We're also thrilled to welcome the founders of some generational companies aboard, including @patrickc (Stripe), @tobi (Shopify), @AravSrinivas (Perplexity), @BrendanFoody (Mercor), @oliveur (Datadog), @adamdangelo (Quora) and @ericsyuan (Zoom) We're a 35-person team. But that's about to change; we're hiring across the board, and we'd love for you to join us.
434
184
144
1,334
248,617
We’re betting our $5.5M seed round that the next leap in AI coding won’t come from OpenAI or Anthropic. It’ll come from a new feedback loop that learns from you. Introducing Beacon: open-source, self-improving memory for coding agents. Your sessions capture how you debug and solve problems. Today, that context gets lost and you have to re-explain things every time you switch tools. Beacon continuously distills your sessions into reusable skills across Claude Code, Cursor, Codex, and 20+ harnesses, so your next agent can learn from the last. Beacon is free and OSS 🌟 github.com/Asymptote-Labs/ag… Why should the frontier labs be the only ones winning with your sessions? You already did the work. Now let your coding agents learn from you.
299
161
123
1,529
534,883
Deno spent years persuading developers to bet on a better runtime. Now its creator sees “marginal” gains in a project “sucked into the gravity well of node compatibility.” The backlash, the forks, and how AI is changing the future of JavaScript runtimes. socket.dev/blog/deno-acquisi…

Deno Goes the Way of the Dinosaur

Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

socket.dev
10
2
24
4,371
🎙️ @andrewbecherer on the Build vs Buy decision for security teams in the agentic AI era
1
5
9
2,008
Feross retweeted
Jon@jonv1919Oct 16
Replying to @SocketSecurity
@SocketSecurity is hiring! Amazing company!
Grace Gong
@gracegongGGOct 15
Top pick of AI companies I would join
3
9
1,299
Anthropic researchers ran a 26-billion-parameter model across fifteen cheap Android TV boxes 🤯
6
1
8
3,669
Anthropic is giving open source maintainers a fast track to Mythos vulnerability findings. Its free OSS Scanner delivers recurring audits, reports showing how to reproduce vulnerabilities, and proposed fixes when available. socket.dev/blog/anthropic-os…

Anthropic Gives Open Source Maintainers a Fast Track to Mythos Vulnerability Findings

Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.

socket.dev
1
3
13
2,848
🚀 Socket for Origin is now available in @cursor_ai’s App Marketplace! Automatically scan dependency changes for malware, compromised updates, and other supply chain risks. Get findings directly on your pull requests, before you merge. socket.dev/blog/socket-for-o…

Socket for Origin Now Available

Socket for Origin scans dependency changes in pull requests and flags security risks based on your team’s policies. Now available in Cursor’s App Marketplace.

socket.dev
3
1
6
1,983
“It’s never been easier to build a security program. It’s never been harder to secure an organization.” 🗣️ @andrewbecherer & @dannguyenhuu from @DecibelVC
1
2
1
3
1,778
You see the fifth thing your agent tried. The four before it may have pulled malicious packages, and you'd never know. That's why every input to a software factory needs to be verified. Today we published the Software Factory Reference Architecture, read the paper here: agentbaseline.org/reference-…
5
8
1,129
More than 500 GitHub accounts... Tens of thousands of repos... GhostAction is back 🔪
1
11
18
2,747
Agent Baseline published a reference architecture today for securing software factories, with four boundaries enforced outside the agent. Co-authored by Socket CTO @AhmadNassri with @ealeyner, @ianlivingstone, @vtahowe, and other industry leaders. socket.dev/blog/agent-baseli…

Agent Baseline Publishes Security Reference Architecture for Software Factories

Agent Baseline’s new reference architecture shows how to secure software factories with four boundaries enforced outside the AI agent.

socket.dev
6
13
1,893
Feross retweeted
Cursor
@cursor_aiOct 13
Origin, Cursor’s code hosting platform, now supports over 20 integrations. Connect your repos to tools for CI, deployments, code review, security, monitoring, and project management.
155
134
88
2,105
186,615
Blocking a bad package isn't enough. Agents route around it: the CDN, a rewritten registry config, a raw DNS lookup. So we hide bad versions. If an agent doesn't know a version exists, it won't go after it. More in the Software Factory Reference Architecture, out Tuesday.
Insecure Agents Podcast
@insecureagentsOct 11
"As far as the agent or the package manager is concerned, those versions don't exist." - @AhmadNassri CTO @SocketSecurity What an agent can't see, it can't reach for. That's in the Software Factory Reference Architecture, out Tuesday from Ahmad, @ealeyner, and more.
2
3
11
2,067
Load more