Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

1/4: 🚀 Big news from Socket! We're launching a new browser extension for Chrome, Firefox, Edge, & Brave. It helps you verify the security & trustworthiness of NPM packages before you install them. ✨ 👀 Let's see how it can help you avoid terrible NPM dependencies! 🗑️

Feross

41,256 subscribers

14,377 views • 3 years ago •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

6 Comments

Feross3 years ago

2/4: 👀 With the Socket extension, you get real-time insights into potential vulnerabilities and unwanted behavior of your dependencies, right in your browser. 🤯🤯🤯 GET ALL THE DETAILS:

Feross3 years ago

3/4: 🔒 Socket is about making your open-source package search process faster and more secure. Click on a package to see detailed metrics about its quality, maintenance, and potential vulnerabilities. You can explore the issues further or search for safer alternatives.

Feross3 years ago

4/4: ⭐️ It takes just 2 clicks to install the Socket Web Extension! Get it for Chrome, Edge, Brave, or other Chromium-based browsers: For Firefox users, head to Firefox Add-Ons: ❤️ Let's build safer software together!

Feross3 years ago

👏 The Socket web extension was brought to you by 18-year-old Socket intern @arjunbarrett 🎉 Incredible work, Arjun! ✨

Karl Horky 🦋 @karlhorky.com3 years ago

@SocketSecurity Amazing, thanks for this 😍 added to our System Setup guide for @getupleveled bootcamp students, going to be super helpful for them 🙌

Feross3 years ago

@SocketSecurity @getupleveled Nice!!

Related Videos

“Just use an npm package” Socket

“Just use an npm package” Socket

Feross

30,661 views • 2 months ago

You built a Chrome extension using an AI agent. Now, how do you let that agent test it? We updated Chrome DevTools for agents so your agent can install extensions & interact with content inside popups automatically →

You built a Chrome extension using an AI agent. Now, how do you let that agent test it? We updated Chrome DevTools for agents so your agent can install extensions & interact with content inside popups automatically →

Chrome for Developers

133,461 views • 29 days ago

New day, new #ChatGPT extension! 🤗 With the `ChatGPT for Search Engines` extension, you can view ChatGPT responses on Google and Bing! See my demo video below 👇 Install it from the Chrome web store: 🔗

New day, new #ChatGPT extension! 🤗 With the `ChatGPT for Search Engines` extension, you can view ChatGPT responses on Google and Bing! See my demo video below 👇 Install it from the Chrome web store: 🔗

Chaz Wargnier ☄️

666,000 views • 3 years ago

How To Buy $MYRO (Simplified) 1. Install Phantom Wallet: IOS: Android: Chrome Extension: 2. Load it up with Solana ($SOL) 3. Copy and paste the link below into your phantom wallet browser 4. Enter the amount of Solana you would like to swap for $MYRO and click swap

How To Buy $MYRO (Simplified) 1. Install Phantom Wallet: IOS: Android: Chrome Extension: 2. Load it up with Solana ($SOL) 3. Copy and paste the link below into your phantom wallet browser 4. Enter the amount of Solana you would like to swap for $MYRO and click swap

Myro | Solana Chain 🐕‍🦺

928,523 views • 2 years ago

stop using curl | sh to download *any* installer you find on the internet, stop using npm to download global dependencies this guy just built `safe`, a utility that inspects remote installer scripts before executing them, (all of this for just one star on github) it downloads the artifact, runs static analysis, checks against vulnerability databases and reputation sources, then decides whether it's safe to run here's an example showing Safe warning the user about the openclaw's npm install script: github:

stop using curl | sh to download any installer you find on the internet, stop using npm to download global dependencies this guy just built `safe`, a utility that inspects remote installer scripts before executing them, (all of this for just one star on github) it downloads the artifact, runs static analysis, checks against vulnerability databases and reputation sources, then decides whether it's safe to run here's an example showing Safe warning the user about the openclaw's npm install script: github:

forloop

14,417 views • 3 months ago

Meet the new Kimi Browser Extension, formerly Kimi WebBridge. From your browser sidebar, you can chat with Kimi to navigate websites, fill out forms, and get things done. For repetitive tasks, record your steps once and save them as a skill. Kimi can take it from there next time. Available now on and the Chrome Web Store.

Meet the new Kimi Browser Extension, formerly Kimi WebBridge. From your browser sidebar, you can chat with Kimi to navigate websites, fill out forms, and get things done. For repetitive tasks, record your steps once and save them as a skill. Kimi can take it from there next time. Available now on and the Chrome Web Store.

Kimi.ai

66,545 views • 7 days ago

How to use Hot Wallet extension on a mobile phone? Hey everyone, today's video tutorial is about how to use HOT Protocol 🔥 on iOS Mises Browser. If this video tutorial is helpful for you, please also RT it to help others! If it doesn't answer your question, please contact for support! If Mises Browser is something you've never heard of, please take one minute to read this: Mises Browser is the world's first mobile Web3 browser that supports Chrome extensions on both Android and iOS. More than 5 million users choose Mises Browser to access Web3 applications on mobile. You can also try the 1st iOS browser which supports Chrome extension via this link: and you won't regret it! #Mises #Web3 #iPhone #Extension #Hotprotocol #wallet

How to use Hot Wallet extension on a mobile phone? Hey everyone, today's video tutorial is about how to use HOT Protocol 🔥 on iOS Mises Browser. If this video tutorial is helpful for you, please also RT it to help others! If it doesn't answer your question, please contact for support! If Mises Browser is something you've never heard of, please take one minute to read this: Mises Browser is the world's first mobile Web3 browser that supports Chrome extensions on both Android and iOS. More than 5 million users choose Mises Browser to access Web3 applications on mobile. You can also try the 1st iOS browser which supports Chrome extension via this link: and you won't regret it! #Mises #Web3 #iPhone #Extension #Hotprotocol #wallet

Mises

13,842 views • 1 year ago

TradingView to Screener & Marketsmith Extension ⚠️Please before asking in comment or DM, how to install, please read the full post, i have given the instructions also, and if you still cant follow it, You will find plenty of video on youtube on how to install the plugin, or ask AI⚠️ 🙏This was a killer timesaver tool for me, Hope it helps all, please share your feedbacks or gratitude in comments, will be sharing more plugin like this in future as well ☑️Overview This Chrome Extension natively integrates with TradingView, adding quick-access buttons to your top chart header. These buttons allow you to instantly view fundamental financial data for the currently active stock symbol on or evaluate it on MarketSmith India. > Features : > Screener New Tab: Opens the consolidated financials page for the current active TradingView symbol in a new browser tab. > Screener Splitscreen: Toggles a bottom-half split screen (iframe) inside the TradingView tab to load the page directly over your charts, letting you perform fundamental and technical analysis synchronously. > Marketsmith New Tab: Opens the stock evaluation page on MarketSmith India for the active symbol in a new tab. > This extension utilizes the Manifest V3 standard APIs and works smoothly across all modern Chromium-based browsers, including: Google Chrome Microsoft Edge Brave Browser Vivaldi Opera Arc Browser ⭐ Installation Instructions (Local/Unpacked) -> 1)Download or keep this entire extension folder on your computer. 1) Download or keep this entire extension folder on your computer: For Google Chrome: type chrome://extensions/ in the address bar. For Microsoft Edge: type edge://extensions/ in the address bar. For Brave: type brave://extensions/ in the address bar. Enable Developer mode using the toggle switch (usually located in the top-right corner). 3) Click the Load unpacked button that appears. 4) In the file explorer popup, choose this exact directory (the folder containing the manifest.json file). 5) The extension is now successfully installed! Open up TradingView to play around with the newly injected buttons in the top header. Github Repo ->

TradingView to Screener & Marketsmith Extension ⚠️Please before asking in comment or DM, how to install, please read the full post, i have given the instructions also, and if you still cant follow it, You will find plenty of video on youtube on how to install the plugin, or ask AI⚠️ 🙏This was a killer timesaver tool for me, Hope it helps all, please share your feedbacks or gratitude in comments, will be sharing more plugin like this in future as well ☑️Overview This Chrome Extension natively integrates with TradingView, adding quick-access buttons to your top chart header. These buttons allow you to instantly view fundamental financial data for the currently active stock symbol on or evaluate it on MarketSmith India. > Features : > Screener New Tab: Opens the consolidated financials page for the current active TradingView symbol in a new browser tab. > Screener Splitscreen: Toggles a bottom-half split screen (iframe) inside the TradingView tab to load the page directly over your charts, letting you perform fundamental and technical analysis synchronously. > Marketsmith New Tab: Opens the stock evaluation page on MarketSmith India for the active symbol in a new tab. > This extension utilizes the Manifest V3 standard APIs and works smoothly across all modern Chromium-based browsers, including: Google Chrome Microsoft Edge Brave Browser Vivaldi Opera Arc Browser ⭐ Installation Instructions (Local/Unpacked) -> 1)Download or keep this entire extension folder on your computer. 1) Download or keep this entire extension folder on your computer: For Google Chrome: type chrome://extensions/ in the address bar. For Microsoft Edge: type edge://extensions/ in the address bar. For Brave: type brave://extensions/ in the address bar. Enable Developer mode using the toggle switch (usually located in the top-right corner). 3) Click the Load unpacked button that appears. 4) In the file explorer popup, choose this exact directory (the folder containing the manifest.json file). 5) The extension is now successfully installed! Open up TradingView to play around with the newly injected buttons in the top header. Github Repo ->

Roshan Kumar

14,810 views • 7 months ago

The `xz` package backdoor is just the tip of the iceberg. There's a CONSTANT low-level stream of malware and spyware being uploaded to npm, PyPI, and Go registries. I want to share a few examples from the 20,000+ malicious packages we detected so far:

The `xz` package backdoor is just the tip of the iceberg. There's a CONSTANT low-level stream of malware and spyware being uploaded to npm, PyPI, and Go registries. I want to share a few examples from the 20,000+ malicious packages we detected so far:

Feross

303,002 views • 2 years ago

BIG NEWS! Today we're launching Skybox EDGE for the public ! 🚀 Over 85% of Pro Teams use EDGE to gain a competitive "edge", and now you can too ! Sign up (with steam), and get access to Pro Level CS2 Stats, and much more ! Go to and try for free today!

BIG NEWS! Today we're launching Skybox EDGE for the public ! 🚀 Over 85% of Pro Teams use EDGE to gain a competitive "edge", and now you can too ! Sign up (with steam), and get access to Pro Level CS2 Stats, and much more ! Go to and try for free today!

Skybox.gg

117,645 views • 2 years ago

SOMEONE MADE IT SO YOU CAN CODE WITH 174 AI MODELS FROM 23 PROVIDERS FOR FREE one npm package and one install: "npm i -g free-coding-models" switch between any model instantly. benchmark them against each other in real time to see which one actually codes best for your use case. no subscriptions. no API keys. no cost. 174 models. 23 providers, all free, all from your terminal. if you're tired of paying for 3 different AI subscriptions just to compare which model codes better, this is it

SOMEONE MADE IT SO YOU CAN CODE WITH 174 AI MODELS FROM 23 PROVIDERS FOR FREE one npm package and one install: "npm i -g free-coding-models" switch between any model instantly. benchmark them against each other in real time to see which one actually codes best for your use case. no subscriptions. no API keys. no cost. 174 models. 23 providers, all free, all from your terminal. if you're tired of paying for 3 different AI subscriptions just to compare which model codes better, this is it

Om Patel

93,660 views • 5 months ago

Hey all :) We're 2 people working on this supercozy & relaxing building game Islands&Trains & after over 1 year of hard work, you can finally play a demo ! Please share, retweet🔃 & wishlist to help us - it helps so much💖 #indiegame #indiedev

Hey all :) We're 2 people working on this supercozy & relaxing building game Islands&Trains & after over 1 year of hard work, you can finally play a demo ! Please share, retweet🔃 & wishlist to help us - it helps so much💖 #indiegame #indiedev

Fabi Smith | Islands & Trains OUT NOW

108,432 views • 3 years ago

CrowdStrike’s Head of Counter Adversary Operations adam_cyber says supply chain attacks have shifted from compromising code to targeting developers directly: "They go after your credentials, phish you, get access to your logins to things like npm and PyPI, and then abuse that." "There are a number of ways they can do this with git tags where they can hide malicious code and redirect Git to a tag." "Axios was downloaded something like 100,000 times per week. That gives you a sense of how frequently these packages are used—and people don’t analyze that code." "They trust it came from npm." "Those packages can be updated at a moment’s notice, and you don’t know what changed unless you review the code yourself."

CrowdStrike’s Head of Counter Adversary Operations adam_cyber says supply chain attacks have shifted from compromising code to targeting developers directly: "They go after your credentials, phish you, get access to your logins to things like npm and PyPI, and then abuse that." "There are a number of ways they can do this with git tags where they can hide malicious code and redirect Git to a tag." "Axios was downloaded something like 100,000 times per week. That gives you a sense of how frequently these packages are used—and people don’t analyze that code." "They trust it came from npm." "Those packages can be updated at a moment’s notice, and you don’t know what changed unless you review the code yourself."

TBPN

19,357 views • 6 months ago

I installed a new Visual Studio Code extension to help me write code. But this extension doesn't get in your way. It doesn't try to write code for you. It only gives you hints and recommendations about your code. I like that. Like a second pair of eyes, looking over my shoulder and telling me how I can do things better. The extension is Traycer. You can install it directly from inside Visual Studio Code. It's free forever for anyone working on open-source projects (and if you aren't, you can use it for free until the end of June.) I recorded a super-duper-quick video to show you how this extension works. I know code generation is a huge thing, but I really appreciate tools that help me do what I do better. Thanks to the Traycer team for helping me with the extension and collaborating with me on this post!

I installed a new Visual Studio Code extension to help me write code. But this extension doesn't get in your way. It doesn't try to write code for you. It only gives you hints and recommendations about your code. I like that. Like a second pair of eyes, looking over my shoulder and telling me how I can do things better. The extension is Traycer. You can install it directly from inside Visual Studio Code. It's free forever for anyone working on open-source projects (and if you aren't, you can use it for free until the end of June.) I recorded a super-duper-quick video to show you how this extension works. I know code generation is a huge thing, but I really appreciate tools that help me do what I do better. Thanks to the Traycer team for helping me with the extension and collaborating with me on this post!

Santiago

101,068 views • 2 years ago

Charles Hoskinson said This is how you fix the Stablecoin/Securities issue. "Let's create a new category of DIGITAL SECURITIES for RWAs. Let the blockchain be the disclosure vehicle & create a model where you can be decentralized, but be a security."

Charles Hoskinson said This is how you fix the Stablecoin/Securities issue. "Let's create a new category of DIGITAL SECURITIES for RWAs. Let the blockchain be the disclosure vehicle & create a model where you can be decentralized, but be a security."

WOLF Bitcoin

31,265 views • 6 months ago