build1 publisher
Socket finds PolinRider in four dev-* versions of a 700,000-download Packagist package
Socket reports no malicious stable release. The exposure sits with teams that resolve dev-* constraints directly, and with anyone who clones the repository and opens it in a VS Code-compatible IDE.
Publishers:socket.dev
Reality
- Evidence58
- Adoption25
- Hype gap+12
- Incentives75
- Confidence45