Socket incident

Packages are being incorrectly flagged as malware

Resolved after 2 hours 41 minutes, affecting Socket API and Socket for GitHub and 1 more, on January 8, 2026.

identified Jan 08, 2026, 08:59 PM UTC

We have observed that a large number packages have been incorrectly flagged as malware, with incorrect threat descriptions. We are working on a fix.

Started
Jan 08, 2026, 08:59 PM UTC
Resolved
Jan 08, 2026, 11:41 PM UTC
Duration
2h 41m
Detected by Pingoru
Jan 08, 2026, 08:59 PM UTC

Affected components

Socket APISocket for GitHubSocket DashboardPackage Pages

Update timeline

  1. identified Jan 08, 2026, 08:59 PM UTC

    We have observed that a large number packages have been incorrectly flagged as malware, with incorrect threat descriptions. We are working on a fix.

  2. resolved Jan 08, 2026, 11:41 PM UTC

    This incident has been resolved.

Your product runs on more than Socket

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Add your stack →