Socket

“About half of our team at Socket are maintainers, half the engineering team. And so we have a lot of connections in the community. And our CTO is the former CTO of NPM.”

“The easiest path into a company... has now become the software supply chain. Just like a human hacker would, they're going to pick the easiest way in, and the lowest hanging fruit now has become just publishing malware to public registries because they know that there's no vetting happening, and the developers are likely to install them.”