The Changelog: Software Development, Open Source
npm under siege (what to do about it) (Friends)
03 Oct 2025
Description
Over the past two months, we’ve seen some of the most serious supply chain attacks in npm history: phishing campaigns, maintainer account takeovers, and malware published to packages with billions of weekly downloads. What is going on?! What can we do about it? Our old friend, Feross Aboukhadijeh, joins us to help make sense of it all.
Audio
Featured in this Episode
No persons identified in this episode.
Transcription
No transcription available yet
Help us prioritize this episode for transcription by upvoting it.
0
upvotes
Popular episodes get transcribed faster