Guarding the JavaScript Supply Chain: Preventing NPM Attacks with Feross Aboukhadijeh - JSJ 695
JavaScript Jabber1 Marras 2025

Guarding the JavaScript Supply Chain: Preventing NPM Attacks with Feross Aboukhadijeh - JSJ 695

Hey everyone—it’s Steve Edwards here, and in this episode of JavaScript Jabber, I’m joined by returning guest Feross Aboukhadijeh, founder of Socket.dev, for a deep dive into the dark and fascinating world of open source supply chain security. From phishing campaigns targeting top NPM maintainers to the now-infamous Chalk library compromise, we unpack the latest wave of JavaScript package attacks and what developers can learn from them.

Feross explains how some hackers are even using AI tools like Claude and Gemini as part of their payloads—and how defenders like Socket are fighting back with AI-powered analysis of their own. We also dive into GitHub Actions vulnerabilities, the role of two-factor authentication, and the growing need for “phishing-resistant 2FA.” Whether you’re an open source maintainer or just someone who runs npm install a little too often, this episode will open your eyes to how much happens behind the scenes to keep your code safe.

🔗 Links & Resources

Become a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

Jaksot(734)

014 JSJ SVG and Data Visualization with Chris Bannon

014 JSJ SVG and Data Visualization with Chris Bannon

The panelists talk about SVG and data visualization with Chris Bannon.Special Guest: Chris Bannon. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/privacyBecome a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

19 Touko 201255min

013 JSJ Knockout.js with Steven Sanderson

013 JSJ Knockout.js with Steven Sanderson

The panelists discuss Knockout.js with Steven SandersonSpecial Guest: Steven Sanderson. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/privacyBecome a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

11 Touko 201244min

012 JSJ Design Patterns in JavaScript with Addy Osmani

012 JSJ Design Patterns in JavaScript with Addy Osmani

The panelists talk about design patterns in JavaScript with Addy OsmaniSpecial Guest: Addy Osmani. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/privacyBecome a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

26 Huhti 201222min

011 JSJ Can HTML5 and JavaScript Really Replace Flash?

011 JSJ Can HTML5 and JavaScript Really Replace Flash?

The panelists discuss whether HTML5 and JavaScript can really replace Flash. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/privacyBecome a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

13 Huhti 201254min

010 JSJ Node.js

010 JSJ Node.js

The panelists talk about Node.js. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/privacyBecome a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

6 Huhti 201259min

009 JSJ Testing JavaScript with Joe Eames

009 JSJ Testing JavaScript with Joe Eames

The panelists discuss testing JavaScript with Joe EamesSpecial Guest: Joe Eames. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/privacyBecome a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

27 Maalis 20121min

008 JSJ V8 and Dart with Lars Bak and Kasper Lund

008 JSJ V8 and Dart with Lars Bak and Kasper Lund

The panelists discuss V8 and Dart with Lars Bak and Kasper Lund.Special Guest: Kasper Lund. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/privacyBecome a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

14 Maalis 201247min

007 JSJ Online Resources for Javascript Developers

007 JSJ Online Resources for Javascript Developers

The panelists discuss online resources for JavaScript Developers. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/privacyBecome a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

13 Maalis 201230min

Suosittua kategoriassa Liike-elämä ja talous

sijotuskasti
psykopodiaa-podcast
mimmit-sijoittaa
rss-rahapodi
herrasmieshakkerit
ostan-asuntoja-podcast
rss-lentopaivakirjat
leadcast
rss-rahamania
rss-neuvottelija-sami-miettinen
pomojen-suusta
rss-laakispodi
rss-paasipodi
rss-startup-ministerio
rss-lounastauko
rss-merja-mahkan-rahat
rss-sisalto-kuntoon
rss-johtajien-tyonhakusirkus
rss-doulapodi
rss-karon-grilli