technologyOct 3, 20251:35:20pending
npm under siege (what to do about it) (Friends)
About this episode
Over the past two months, we’ve seen some of the most serious supply chain attacks in npm history: phishing campaigns, maintainer account takeovers, and malware published to packages with billions of weekly downloads. What is going on?! What can we do about it? Our old friend, Feross Aboukhadijeh, joins us to help make sense of it all.
Get every episode summarized
Each time The Changelog: Software Development, Open Source publishes, we email you a written briefing from the transcript — the topics, who appeared, and any specific claims, with the ad reads skipped.
Email me new episodesFree for 3 shows. No card needed.
No transcript yet
This episode has not been transcribed. Request it and it moves to the front of the queue.
More episodes
More from The Changelog: Software Development, Open Source
Forking Cal.com to closed source (Interview)
The Changelog: Software Development, Open Source
Sep 3, 20261:54:32completed
Postgres at PlanetScale (Interview)
The Changelog: Software Development, Open Source
Aug 25, 20261:42:17pending
Canary tokens and digital tripwires (Interview)
The Changelog: Software Development, Open Source
Jul 21, 20262:06:48pending
From open source hits to OpenAI (Interview)
The Changelog: Software Development, Open Source
Jun 5, 20261:46:28pending