惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

WordPress大学
WordPress大学
Engineering at Meta
Engineering at Meta
D
DataBreaches.Net
月光博客
月光博客
Recent Announcements
Recent Announcements
Google DeepMind News
Google DeepMind News
U
Unit 42
腾讯CDC
爱范儿
爱范儿
J
Java Code Geeks
有赞技术团队
有赞技术团队
Blog — PlanetScale
Blog — PlanetScale
N
Netflix TechBlog - Medium
B
Blog
Stack Overflow Blog
Stack Overflow Blog
GbyAI
GbyAI
T
The Blog of Author Tim Ferriss
小众软件
小众软件
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
Y
Y Combinator Blog
大猫的无限游戏
大猫的无限游戏
Microsoft Azure Blog
Microsoft Azure Blog
T
Tailwind CSS Blog
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知

Socket

Fake Corepack Site Distributes Infostealer and Proxyware to ... Large-Scale GitHub Actions Abuse Powers a Distributed cPanel... New Study Identifies 53 Slopsquatting Targets Across 5 Front... White House Launches Gold Eagle Initiative to Manage Surge i... Suno Breached via Shai-Hulud Worm, Leaked Code Exposes AI Mu... Next.js moves to scheduled security releases - Socket 11 Malicious NuGet Tools Pose as Game Cheats to Drop a Windo... Compromised npm Packages in the AsyncAPI Namespace Deliver M... jscrambler npm Package Compromised in Supply Chain Attack - ... Fake Braintree NuGet Package Skims Credit Cards and Harvests... Compromised Injective SDK npm Package Exfiltrates Wallet Key... npm v12 Ships With Install Scripts Off by Default, Begins De... Malicious Go Module Exposes GitHub Malware Lure Network Span... pnpm 11.10 Hardens Registry Authentication to Block Token Re... Coordinated npm and PyPI Campaign Typosquats Popular Secure ... Node.js Considers Public Workflow for Security Reports Amid ... PolinRider: North Korea-Linked Supply Chain Campaign Expands... Risky Biz Podcast: AI Agents Are Raising the Stakes for Soft... Chrome and Firefox Extensions Posing as Free VPNs Add Clipbo... Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages - S... Rolldown Pulls Rust React Compiler Integration After Binary ... Miasma Mini Shai-Hulud Hits LeoPlatform npm Packages and Git... Frontier AI Is Now Critical Infrastructure - Socket The Code You Didn't Write Is Still Yours to Defend - Socket GitHub Actions Checkout Now Blocks Risky pull_request_target... Introducing Repository Access Permissions and Custom Roles -... Socket MCP Adds Org Alerts, Threat Feed Review, and Package ... Socket Firewall Now Blocks Malicious VS Code and Open VSX Ex... 140+ Mastra npm Packages Compromised in Coordinated Supply C... npm Package Uses Prompt Injection and Token Flooding to Disr...
Introducing Organization Notifications in Socket
Alex Morais · 2026-04-22 · via Socket

Sidebar CTA Background

Secure your dependencies with us

Socket proactively blocks malicious open source packages in your code.

Install

Today, we’re excited to launch Organization Notifications in Socket.

This new feature gives teams a direct way to stay on top of organization alert activity without relying on someone to constantly watch the dashboard. With Organization Notifications, you can subscribe to organization-level alert events, filter the kinds of alerts you care about, and send batched updates to a configured destination. We're launching the email channel type first, and Slack and Microsoft Teams support are planned next.

Organization alerts already help surface important security issues across your repositories. Organization Notifications builds on that by making those updates easier to route, review, and act on. Instead of turning every alert into a separate interruption, Socket groups matching activity into periodic summaries so teams can stay informed without adding more noise.

Create a Channel and Subscribe to Organization Alert Events#

The feature is managed from a new Notifications page in organization settings. Teams first create a notification channel, then attach subscriptions to it. When configuring email as a channel, Socket marks it as verification pending until the recipient confirms ownership. After verification, that address can be used as a notification destination.

Once a channel is in place, teams can create subscriptions for the alert activity they want to receive. At launch, Socket supports three organization alert events:

  • organization alert created
  • organization alert changed
  • organization alert cleared

This makes it possible to track the full lifecycle of an alert, from the moment it appears to later changes and eventual resolution. The changed event also covers updates to the alert itself, including cases where a new repository is added to that alert.

Filter for the Alerts That Matter#

Subscriptions can be scoped by category, severity, priority, and repository. If a filter is left unset, Socket treats it as matching any value for that field. To keep notifications targeted, users currently need to choose at least one filter before creating a subscription.

That gives teams a practical way to route the right alert activity to the right inbox, whether they want to focus on a specific repository, a certain class of alert, or the highest-priority issues first.

Get Batched Updates Instead of Inbox Spam#

Organization Notifications is designed to reduce noise, not add to it. Instead of sending one email per alert, Socket batches updates together and sends email at most once every 20 minutes. If there are new or updated alerts during that window, the email includes a summary of what changed. If there is nothing new to report, nothing is sent.

That batching model gives teams a steady signal without turning routine alert activity into a flood of notifications.

Notification emails include a priority summary, a sample list of updated alerts from the latest batch, and a link back to the alerts view in the Socket dashboard. Emails display up to 20 alerts and indicate when more alerts were included in the batch than are shown in the message itself.

Get Started#

Organization Notifications gives teams a better way to operationalize organization alerts in Socket. Instead of relying on someone to manually check for changes, teams can define what matters, control where updates go, and get a digestible summary when alert activity happens.

If you’re interested in trying Organization Notifications, get in touch with the Socket team to enable the feature for your organization. The feature is available on Team, Business, and Enterprise plans.