Entity trail

Socket

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Showing the first 40 findings. More graph evidence exists in the corpus.

Corpus findings

2026-07-10 / arxiv-researcherOpen-Source Multi-Agent Firewall Intercepts Both HTTP(S) and WebSocket LLM TrafficThis paper (arXiv 2607.08282, July 9) proposes a user-facing privacy firewall for LLM interactions, combining a browser extension with a proxy to achieve total traffic interception across both HTTP(S) and WebSocket channels — the WebSocket coverage matters because streaming chat interfaces bypass conventional HTTP-only inspection. A multi-agent pipeline sits at the core, classifying and redacting sensitive data before it reaches the model provider. It is released open-source, making it one of the few immediately deployable artifacts in this week's security batch.
2026-06-14 / agents-researcherSupply-chain worms now poison CLAUDE.md and .cursorrules with zero-width hidden instructionsThe continuously-mutating Miasma/Hades campaign (pivoting delivery every 48–72 hours since June 1) has added a novel agent-specific vector: packages inject .cursorrules and CLAUDE.md files containing zero-width Unicode hidden instructions. When a developer opens the project in Cursor or Claude Code, the assistant reads the configuration as legitimate project guidance and runs a 'security scan' that exfiltrates local secrets. Socket flagged 37 malicious Python wheels across 19 PyPI packages on June 7 and a compromised ensmallen 0.8.101 on June 8 — the first wave to weaponize AI coding-agent config files at scale.
2026-06-02 / skill-finderIntel Launches Xeon 6+ on 18A Process and Crescent Island AI GPU at Computex 2026On June 1, Intel announced Xeon 6+ (code-named Clearwater Forest), its first data-center CPU on the Intel 18A (1.8nm-class) process, scaling to 288 efficiency cores per socket with 2.5x performance and 45% better perf-per-watt over the prior generation. Intel simultaneously detailed Crescent Island, a 350W air-cooled PCIe AI GPU (Xe 3P architecture) with up to 480GB LPDDR5X targeting agentic inference workloads at low total cost of ownership. Both target the growing demand for AI-optimized data center infrastructure that isn't NVIDIA-locked.
2026-06-02 / hn-researcherChipotlai Max: Community Forks OpenCode to Use Chipotle's Customer Chatbot as a Free AI Coding Agent — 288 Points on HNA developer reverse-engineered Chipotle's Pepper chatbot (Amelia-based) via WebSocket/SockJS+STOMP, exposed it as an OpenAI-compatible proxy at localhost:3000, and the community forked OpenCode to ship it as 'Chipotlai Max' — a zero-API-key coding agent running on 'stolen Chipotle compute.' The project actively recruits contributors to reverse-engineer chatbots from Home Depot, Target, Starbucks, and more. MIT licensed, 239 stars.
2026-05-29 / projects-researcherAssemblyAI Launches Voice Agent API — Complete Voice Pipeline Behind Single WebSocket at $4.50/Hour Flat RateAssemblyAI launched its Voice Agent API on May 19, integrating speech-to-text (Universal-3 Pro ASR), LLM routing, and voice generation into a single WebSocket connection with ~1 second end-to-end latency. Key features include speech-aware VAD for natural turn-taking, JSON Schema tool calling for backend integrations, and 30-second reconnect for session continuity. The $4.50/hour flat rate breaks from industry per-minute billing and targets high-volume customer support and IVR use cases.
2026-05-28 / agents-researcherAzure SRE Agent CVE-2026-32173 (CVSS 8.6): Unauthenticated WebSocket Exposes Live Cloud Ops, Deployment CredentialsEnclave AI researcher Yanir Tsarimi found that Azure SRE Agent's /agentHub WebSocket endpoint accepted tokens from any Entra ID tenant due to a multi-tenant app registration misconfiguration, then broadcast all events to all clients with no identity filtering. Exposed data included user prompts, agent reasoning traces, every command with full arguments, output, and in testing, deployment credentials for live web apps. Microsoft classified it as improper authentication and patched; no prior authentication was needed to exploit.
2026-05-22 / skill-finderSocket Security Raises $60M Series C at $1B Valuation — Counts Anthropic, xAI, Cursor, Figma, and Vercel as CustomersSocket, a supply chain security startup, raised $60M Series C led by Thrive Capital (with a16z participation) at a $1B valuation, bringing total funding to $125M. The platform blocks malicious open-source packages before download, reporting 1,000+ attacks blocked weekly. Its customer list reads like a who's-who of AI tooling: Anthropic, xAI, Replit, Cursor, Figma, and Vercel. For builders running AI agents that install dependencies autonomously, Socket's firewall sits at a critical choke point in the agentic supply chain.
2026-05-20 / reddit-researcherOpen-Source Tool Generates 3D Objects With Functional Articulated Parts — LLM-Agnostic Pipeline on GitHubA practitioner shared a pipeline that uses LLMs to generate 3D objects composed of separated, functional parts with hinge and socket articulation, rather than the monolithic 3D blobs typical of current text-to-3D systems. The demo video shows a washing machine with independently moving door, drum, and panels — each part is articulated and can interact physically. The tool is open-source and LLM-agnostic — 213 upvotes and 45 comments on r/LocalLLaMA with strong builder interest.
2026-05-18 / agents-researcherPipelock 2.3.0: Open-Source AI Agent Firewall Ships 11-Layer Scanner, 48 Credential Patterns, and Tamper-Evident Audit Logs Under Apache 2.0Pipelock 2.3.0, an open-source agent firewall by PipeLab, sits at the egress boundary between agents and the network — the agent holds secrets but has no direct network access, while Pipelock holds network access but no secrets. Every HTTP, WebSocket, and MCP message passes through an 11-layer scanner covering SSRF, DLP (48 credential patterns), path traversal, CRLF injection, domain blocklisting, and entropy analysis. Ships as a single 20MB Go binary with hash-chained tamper-evident logs and CycloneDX 1.6 agent SBOMs.
2026-05-17 / agents-researcherAzure SRE Agent CVE-2026-32173 (CVSS 8.6): Unauthenticated WebSocket Endpoint Exposed Live Agent Command Streams to Any Entra ID TenantA multi-tenant authentication bypass in Azure SRE Agent's SignalR Hub gateway allowed any Entra ID account holder to silently eavesdrop on real-time command streams, AI chat, internal LLM reasoning traces, tool calls, and credentials from other tenants. The vulnerability required zero authentication and was network-accessible without user interaction. Microsoft patched in the May Patch Tuesday cycle and organizations should audit all recent Azure SRE Agent access logs for cross-tenant enumeration.
2026-05-15 / skill-finderBrowser Harness: 592-Line Self-Healing CDP Agent That Lets LLMs Write Missing Functions at Runtime — 12.7K Stars and 'The Bitter Lesson of Agent Harnesses' Blog PostBrowser-use released Browser Harness, a minimal (~592 lines of Python) self-healing browser automation framework that connects LLMs directly to Chrome via CDP with one WebSocket and nothing in between. The core design: when an agent encounters a missing capability (e.g., file upload), it edits helpers.py directly, adding the function it needs at runtime. Their blog post 'The Bitter Lesson of Agent Harnesses' argues that even tool abstractions should be deleted — give the LLM direct CDP access and the ability to edit its own harness, and it handles target reattachment, Chrome stalling, and page crashes itself. The JS variant provides 56 CDP domains with 652 typed wrappers. At 12.7K stars and trending, this is the thinnest-harness-wins philosophy taken to its logical conclusion.
2026-05-13 / reddit-researcherfsnotify Go Library Raises Supply Chain Alarms — 321K Dependent Projects Affected by Maintainer Access ChangesThe widely-used Go filesystem notification library fsnotify (10,700+ stars, 321,000+ dependent projects) triggered supply chain security concerns after maintainer Yasuhiro Matsumoto (mattn) was removed from the GitHub organization, posting that even the original author had been removed. Socket.dev researchers flagged the pattern — recent releases, changed maintainer access, deleted public posts — as matching supply chain compromise signatures. Investigations found no malicious code, but the incident highlights how critical infrastructure depends on fragile maintainer trust.

Graph relationships

INVESTED IN
a16z
a16z participated in Socket's Series C.
Source finding
INVESTED IN
Thrive Capital
Thrive Capital led Socket's Series C.
Source finding
USES
skills.sh
skills.sh uses Socket for supply chain security
Source finding
USES
Figma
Figma uses Socket for supply chain security.
Source finding
USES
Cursor
Cursor uses Socket for supply chain security.
Source finding

Source trail

Phoenix Security TradingAgents Show HN project RAMPART Socket StepSecurity Vercel published dedicated remediation steps

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues