Want to create an interactive transcript for this episode?
Podcast: The Changelog: Software Development, Open Source
Episode: npm under siege (what to do about it) (Friends)
Description: Over the past two months, we’ve seen some of the most serious supply chain attacks in npm history: phishing campaigns, maintainer account takeovers, and malware published to packages with billions of weekly downloads. What is going on?! What can we do about it? Our old friend, Feross Aboukhadijeh, joins us to help make sense of it all.
Join the discussionChangelog++ members save 2 minutes on this episode because they made the ads disappear. Join today!Sponsors:Depot – 10x faster builds? Yes please. Build faster. Waste less time. Accelerate Docker image buil...