The OWASP-backed tool scans JavaScript and TypeScript lockfiles locally, aiming to help developers catch and remediate dependency risks before CI failures.
The security platform Socket has recently discovered an enormous worldwide malware operation that has been dubbed "TrapDoor".