Guarding the JavaScript Supply Chain: Preventing NPM Attacks with Feross Aboukhadijeh - JSJ 695

Guarding the JavaScript Supply Chain: Preventing NPM Attacks with Feross Aboukhadijeh - JSJ 695

Hey everyone—it’s Steve Edwards here, and in this episode of JavaScript Jabber, I’m joined by returning guest Feross Aboukhadijeh, founder of Socket.dev, for a deep dive into the dark and fascinating world of open source supply chain security. From phishing campaigns targeting top NPM maintainers to the now-infamous Chalk library compromise, we unpack the latest wave of JavaScript package attacks and what developers can learn from them.

Feross explains how some hackers are even using AI tools like Claude and Gemini as part of their payloads—and how defenders like Socket are fighting back with AI-powered analysis of their own. We also dive into GitHub Actions vulnerabilities, the role of two-factor authentication, and the growing need for “phishing-resistant 2FA.” Whether you’re an open source maintainer or just someone who runs npm install a little too often, this episode will open your eyes to how much happens behind the scenes to keep your code safe.

🔗 Links & Resources

Become a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

Avsnitt(738)

TypeScript, Security, and Type Juggling with Ariel Shulman & Liran Tal - JSJ 679

TypeScript, Security, and Type Juggling with Ariel Shulman & Liran Tal - JSJ 679

In this episode, we dove headfirst into the swirling waters of TypeScript, its real-world use cases, and where it starts to fall short—especially when it comes to security. Joining us from sunny Tel A...

29 Maj 20251h 32min

Building Agentic AI Workflows with Matthew Henage - JSJ 678

Building Agentic AI Workflows with Matthew Henage - JSJ 678

In this episode, we sat down with full-stack developer and AI innovator Matthew Henage, creator of WAOS.ai (Web App Operating System) and the incredible storytelling platform SpeakMagic.ai. This conve...

22 Maj 20251h 3min

Reinventing Web Development with Brisa: A Conversation with Aral Roca - JSJ 677

Reinventing Web Development with Brisa: A Conversation with Aral Roca - JSJ 677

In this week’s episode, it’s just me — Charles Max Wood — and I’m joined by the incredibly sharp and open-source-loving Aral Roca, direct from Barcelona! Aral’s the creator of Brisa, a new full-stack ...

15 Maj 20251h 5min

Building Enterprise Infrastructure with Bit & AI with Gilad Shoham - JSJ 676

Building Enterprise Infrastructure with Bit & AI with Gilad Shoham - JSJ 676

In this episode, I (Steve Edwards) flew solo on the mic but had the pleasure of hosting a truly insightful conversation with Gilad Shoham, VP of Engineering at Bit.Cloud. Gilad brought the heat from I...

8 Maj 202558min

Replacing Create React App: Why Create TS Router App Is the Future of React Development - JSJ 675

Replacing Create React App: Why Create TS Router App Is the Future of React Development - JSJ 675

We’ve been diving into the evolving landscape of React app development and why tools like Create TS Router App (CTA) are stepping up to fill the gap left by the deprecation of Create React App (CRA). ...

2 Maj 20251h 30min

Empowering Devs and Innovators: Inside Vercel’s Impact, Feature Flags, and the Rise of v0 - JsJ 674

Empowering Devs and Innovators: Inside Vercel’s Impact, Feature Flags, and the Rise of v0 - JsJ 674

In this episode, Lee Robinson, who works at Vercel, discusses the company’s impact on web development despite its relatively small size. He explains their approach to empowering small, founder-led tea...

21 Apr 20251h 22min

Building 50 Apps in 50 Days: The Power of Boring Stacks with Kelvin - JsJ_673

Building 50 Apps in 50 Days: The Power of Boring Stacks with Kelvin - JsJ_673

In this episode, we dive into an engaging conversation with Kelvin, where we explore his approach to full-stack JavaScript development and the power of using simple, stable technologies to speed up ap...

14 Apr 20251h

Breaking Into Tech: Lessons from My Career Path - JsJ 672

Breaking Into Tech: Lessons from My Career Path - JsJ 672

This episode is a little different—thanks to a U.S. holiday, I’m flying solo. But that just means we get to have a one-on-one chat!I dive into my career journey—not to brag, but to offer insights for ...

7 Apr 202544min

Populärt inom Business & ekonomi

framgangspodden
varvet
badfluence
rss-jossan-nina
rss-borsens-finest
rss-svart-marknad
svd-tech-brief
avanzapodden
uppgang-och-fall
fill-or-kill
rss-inga-dumma-fragor-om-pengar
borsmorgon
rss-dagen-med-di
lastbilspodden
bathina-en-podcast
rss-kort-lang-analyspodden-fran-di
affarsvarlden
market-makers
rss-den-nya-ekonomin
borslunch-2