Hey, you! Want to protect your dev machine from npm malware without changing your workflow? Try a new tool that transparently isolates npm cli in a docker container. No need to remember to do anything! Early access: github.com/lavamoat/kipuka RT for reach 😉 and help me improve

We are starting a research internship program at Socket We are particularly interested in PhD students who want to apply their research ideas in the broad space of software supply chain security and simultaneously gain industry experience and real-world impact.⬇️