Guarding the JavaScript Supply Chain: Preventing NPM Attacks with Feross Aboukhadijeh - JSJ 695

Guarding the JavaScript Supply Chain: Preventing NPM Attacks with Feross Aboukhadijeh - JSJ 695

Hey everyone—it’s Steve Edwards here, and in this episode of JavaScript Jabber, I’m joined by returning guest Feross Aboukhadijeh, founder of Socket.dev, for a deep dive into the dark and fascinating world of open source supply chain security. From phishing campaigns targeting top NPM maintainers to the now-infamous Chalk library compromise, we unpack the latest wave of JavaScript package attacks and what developers can learn from them.

Feross explains how some hackers are even using AI tools like Claude and Gemini as part of their payloads—and how defenders like Socket are fighting back with AI-powered analysis of their own. We also dive into GitHub Actions vulnerabilities, the role of two-factor authentication, and the growing need for “phishing-resistant 2FA.” Whether you’re an open source maintainer or just someone who runs npm install a little too often, this episode will open your eyes to how much happens behind the scenes to keep your code safe.

🔗 Links & Resources

Become a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

Episoder(735)

023 JSJ Phantom.js with Ariya Hidayat

023 JSJ Phantom.js with Ariya Hidayat

The panelists talk to Ariya Hidayat about Phantom.js.Special Guest: Ariya Hidayat. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/privacyBecome a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

7 Aug 201240min

022 JSJ Node.js on Azure with Glenn Block

022 JSJ Node.js on Azure with Glenn Block

The panelists talk to Glenn Block about Azure.Special Guest: Glenn Block. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/privacyBecome a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

1 Aug 201256min

021 JSJ Weapons of Choice

021 JSJ Weapons of Choice

The panelists discuss their weapons of choice. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/privacyBecome a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

30 Jul 20121h 11min

020 JSJ Cloud9

020 JSJ Cloud9

The panelists talk about Cloud9. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/privacyBecome a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

13 Jul 201255min

019 JSJ Browserify with James Halliday

019 JSJ Browserify with James Halliday

The panelists talk Browserify with James Halliday.Special Guest: James Halliday. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/privacyBecome a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

2 Jul 201240min

018 JSJ Agile Development

018 JSJ Agile Development

The panelists discuss Agile development. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/privacyBecome a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

23 Jun 201258min

017 JSJ CoffeeScript with Jeremy Ashkenas

017 JSJ CoffeeScript with Jeremy Ashkenas

The panelists talk to Jeremy Ashkenas about CoffeeScript.Special Guest: Jeremy Ashkenas . Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/privacyBecome a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

20 Jun 201218min

016 JSJ SQL and NoSQL

016 JSJ SQL and NoSQL

The panelists talk about SQL and NoSQL. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/privacyBecome a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

8 Jun 201249min

Populært innen Business og økonomi

stopp-verden
dine-penger-pengeradet
rss-penger-polser-og-politikk
e24-podden
lydartikler-fra-aftenposten
rss-borsmorgen-okonominyhetene
pengepodden-2
utbytte
tid-er-penger-en-podcast-med-peter-warren
pengesnakk
morgenkaffen-med-finansavisen
lederpodden
rss-markedspuls-2
rss-investering-gjort-enkelt
voksenpoeng-en-guide-til-voksenlivet
finansredaksjonen
livet-pa-veien-med-jan-erik-larssen
rss-finanslunsj
okonomiamatorene
paretopodden