Web News: The Shai‑Hulud Worm Attack (NPM Hack) HTML All The Things - Web Development, Web Design, Small Business podcast

Artwork

Matt Lawrence Mike Karan Web Development Tech Software Development Entrepreneur Business Podcasting Education Matt Lawrence And Mike Karan

Indhold leveret af Matt Lawrence and Mike Karan, Matt Lawrence, and Mike Karan. Alt podcastindhold inklusive episoder, grafik og podcastbeskrivelser uploades og leveres direkte af Matt Lawrence and Mike Karan, Matt Lawrence, and Mike Karan eller deres podcastplatformspartner. Hvis du mener, at nogen bruger dit ophavsretligt beskyttede værk uden din tilladelse, kan du følge processen beskrevet her https://da.player.fm/legal.

HTML All The Things - Web Development, Web Design, Small Business « »
Web News: The Shai‑Hulud Worm Attack (NPM Hack)

3M ago 37:06

Del

MP3•Episode hjem

Indhold leveret af Matt Lawrence and Mike Karan, Matt Lawrence, and Mike Karan. Alt podcastindhold inklusive episoder, grafik og podcastbeskrivelser uploades og leveres direkte af Matt Lawrence and Mike Karan, Matt Lawrence, and Mike Karan eller deres podcastplatformspartner. Hvis du mener, at nogen bruger dit ophavsretligt beskyttede værk uden din tilladelse, kan du følge processen beskrevet her https://da.player.fm/legal.

In this episode of Web News, Matt and Mike dive into two massive worm attacks that recently hit npm, targeting packages used in millions of projects. While the attackers aimed to steal crypto wallet keys, the actual damage was small—but the implications are enormous. We break down how these man-in-the-middle attacks worked, why shadow dependencies are such a big risk, and what tools like pnpm’s minimum release age can do to help. We also discuss whether AI might allow developers to skip quick one-time npm packages entirely, reducing dependency sprawl and potential vulnerabilities.

Show Notes: https://www.htmlallthethings.com/podcast/the-shai-hulud-worm-attack-npm-hack

… continue reading

446 episoder

#Matt Lawrence #Mike Karan #Web Development #Tech #Software Development #Entrepreneur #Business #Podcasting Education #Matt Lawrence And Mike Karan

Artwork

Web News: The Shai‑Hulud Worm Attack (NPM Hack)

HTML All The Things - Web Development, Web Design, Small Business

240 subscribers

published 3M ago

Del

MP3•Episode hjem

Indhold leveret af Matt Lawrence and Mike Karan, Matt Lawrence, and Mike Karan. Alt podcastindhold inklusive episoder, grafik og podcastbeskrivelser uploades og leveres direkte af Matt Lawrence and Mike Karan, Matt Lawrence, and Mike Karan eller deres podcastplatformspartner. Hvis du mener, at nogen bruger dit ophavsretligt beskyttede værk uden din tilladelse, kan du følge processen beskrevet her https://da.player.fm/legal.

In this episode of Web News, Matt and Mike dive into two massive worm attacks that recently hit npm, targeting packages used in millions of projects. While the attackers aimed to steal crypto wallet keys, the actual damage was small—but the implications are enormous. We break down how these man-in-the-middle attacks worked, why shadow dependencies are such a big risk, and what tools like pnpm’s minimum release age can do to help. We also discuss whether AI might allow developers to skip quick one-time npm packages entirely, reducing dependency sprawl and potential vulnerabilities.

Show Notes: https://www.htmlallthethings.com/podcast/the-shai-hulud-worm-attack-npm-hack

… continue reading

446 episoder

#Matt Lawrence #Mike Karan #Web Development #Tech #Software Development #Entrepreneur #Business #Podcasting Education #Matt Lawrence And Mike Karan

كل الحلقات

×

Velkommen til Player FM!

Player FM is scanning the web for high-quality podcasts for you to enjoy right now. It's the best podcast app and works on Android, iPhone, and the web. Signup to sync subscriptions across devices.

Lyt til 500+ emner

Lyt til dette show, mens du udforsker