Socket Add us as a preferred source on Google
🔄 Data last refreshed 10 minutes ago
🤝
Make a deal with Socket
🔒 Paid proposals held safely in escrow — released only when the work's approved.
Followers
364
Account age
3 yrs
💰 Suggested sponsorship rate
$40 – $65 / sponsored post
Estimated from audience size & typical reach — every deal is negotiable and held in SocialDB escrow.
🎁 Free analysisfor Socket
📊 Post engagement
Recent posts · likes + reposts
Jul 8latest
4
Avg engagement / post
2–5
Typical post (engagement)
1.1%
Engagement vs followers
67/100
Consistent reach
Nov 2022
On Mastodon since
Half of recent posts land between 2 and 5 likes + reposts (median 3) — a dependable floor a sponsored post can count on.
🔥 Top post: 🎉 npm v12 is here! Install scripts are now off by default, git · 10 likes + reposts
📊 Activity & format
Posting cadence
6.1 / week
Posts several times a week.
Content mix
Mostly text
Recent: 11 text · 1 image · 0 video.
Follower / following
6.7×
Follows 54 back. A strong ratio — an audience that follows them, not a follow-for-follow network.
Recent posts
View on Mastodon ↗
🧪 A new independent study tested 5 frontier LLMs on 200k coding prompts. All 5 generated the same nonexistent package names.
After review by PyPI Security and Socket, 53 remained available to register on PyPI or npm as potential slopsquatt…
The White House launched a new initiative to coordinate AI-discovered vulnerabilities across government, critical infrastructure, and open source.
No operating plan is public yet, even as federal vulnerability programs face massive backlog…
Shai-Hulud's downstream impact is still coming to light. The worm hit tens of thousands of GitHub repos, and the latest breach is Suno, whose leaked source code shows how it scraped YouTube, Deezer, and Genius to train its models.
🎩 First …
LLM-assisted vulnerability discovery is raising patch volume across the industry and changing how projects ship security fixes.
Next.js is the latest to respond, moving to scheduled monthly releases starting July 20.
https://socket.dev/b…
🎮 11 malicious NuGet tools posed as game cheats to deliver Windows malware that used Google Sheets to track hosts and enforce a remote ban list.
Three of the payloads also let Telegram users remotely capture and receive screenshots from th…
🚨 Attackers compromised four npm packages in the @asyncapi namespace to deliver the Miasma botnet loader.
The malware runs when an infected module is imported, then pulls an encrypted payload from IPFS across macOS, Linux, and Windows.
ht…
RE: https://fosstodon.org/@SocketSecurity/116902188963272487
🚨 Update: The jscrambler attacker published four more malicious releases: 8.16.0, 8.17.0, 8.18.0, and 8.20.0 with the same infostealer payload.
In 8.18.0 and 8.20.0, the dropper …
🚨 BREAKING: Socket has identified a supply chain attack targeting the popular jscrambler npm package.
The compromised jscrambler@8.14.0 release uses a malicious preinstall hook to execute hidden Windows, macOS, or Linux binaries during npm…
New Research: A fake Braintree SDK on NuGet is skimming live payment card data and stealing merchant credentials in production.
Its 14M download count is massively inflated to rank it right next to the real package.
Full analysis → https:/…
🚨 Socket detected a software supply chain compromise in @injectivelabs/sdk-ts, a popular npm package with ~50,000 weekly downloads and 87 npm dependents.
The malicious release hooks wallet key-derivation functions, records private keys an…
🔺 Socket researchers found a malicious Go module posing as a DNS/subdomain scanner.
Following that trail exposed 222 GitHub repositories across 190 accounts: fake software projects used to stage Windows RAT and infostealer malware.
Full an…
🚨 Socket detected a software supply chain compromise in @injectivelabs/sdk-ts, a popular npm package with ~50,000 weekly downloads and 87 npm dependents.
The malicious release hooks wallet key-derivation functions, records private keys an…
🔺 Socket researchers found a malicious Go module posing as a DNS/subdomain scanner.
Following that trail exposed 222 GitHub repositories across 190 accounts: fake software projects used to stage Windows RAT and infostealer malware.
Full an…
🐘 Community & instance
Home server
fosstodon.org
A open-source software server — its members and audience skew toward that niche, so expect a community-aligned, engaged following.
On Mastodon since
Nov 2022
Joined in the Twitter-exodus wave of late 2022 — part of the migration that made Mastodon a real destination.
💡 Facts
🗓️Joined Mastodon in 2022 — 3 years ago.
👁️Averages 4 views per post.
📤Posts about 6.1× per week.
🕵️ Fake follower check
Estimated43/100
Fair
Credibility score
73%
Mixed
Real audience
Medium
Fake-follower risk
High
Data confidence
- Est. 73% real, active audience · Medium fake-follower risk.
- Low engagement (~1.1% of followers engage each post) — a sign of an inflated or inactive audience.
- Established account (3+ years old).
Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.
About
Socket is a developer-first security platform that protects your code from both vulnerable and malicious dependencies. Next-gen SCA + SBOM + 0-day prevention. LOVED BY DEVELOPERS.
🔀 Audience overlap
EstimatedEstimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.
Oliver Mantell
17%
Save the Hellfire
15%
MartinTaudio
15%
Lars Fiedler :darktable:
15%
mooregroup
12%
takeonrules
10%
More like this
Find more →
Mastodon
＋
Oliver Mantell
@olivermantell@zirk.us
364
Followers
Mastodon
＋
takeonrules ✓
@takeonrules@dice.camp
364
Followers
Mastodon
＋
mooregroup
@mooregroup@mastodon.social
364
Followers
Mastodon
＋
Save the Hellfire
@savethehellfire@mastodon.ie
364
Followers
Mastodon
＋
MartinTaudio
@martintaudio@mastodon.scot
364
Followers
Mastodon
＋
Lars Fiedler :darktable: ✓
@paperg@mastoart.social
364
Followers
Frequently asked questions
How much does Socket charge for a sponsorship?
Socket hasn't published fixed prices yet. Send a proposal through SocialDB and agree terms directly — your payment is held in escrow until the work is approved.
How do I contact Socket for a brand deal or collaboration?
Send a paid deal or collab request right here on SocialDB — we notify Socket, and once they accept, your payment is held safely in escrow and released when the work is approved. You don't need to track down an email.
How many followers does Socket have?
Socket has 364 followers on Mastodon.
✉ Message Socket
Reaching out to influencers is a Pro feature. Upgrade to message any influencer directly — perfect for brands and agencies booking sponsorships.
- ✓ Message any influencer from their listing
- ✓ The influencer gets notified by email
- ✓ Manage every conversation in one inbox
Already Pro? Log in.
🎤 Event / appearance with Socket
Booking an event / appearance is a Pro feature. Upgrade to book Socket for an in-person or virtual appearance — payment held safely in escrow until the event is done.
- ✓ Book them for events, livestreams, panels & more
- ✓ Socket gets notified by email
- ✓ Fee held in escrow, released after the appearance
Already Pro? Log in.
🚀
You're out of free requests this month
Free accounts get 5 per month. Go Pro for unlimited sponsor pitches, collab requests & sponsorship deals — plus featured placement, the Verified badge, free withdrawals and more.
Upgrade to Pro — $9.95/mo →Your free limit resets on the 1st of next month.
Auto-generated from Mastodon's public data — no affiliation with or endorsement by SocialDB. Is this you? Claim it · Remove