Sponsored: What npm 12 fixes… and what it doesn’t
Runs 17:54. Streams from dts.podtrac.com only when you press play.
In this Risky Business sponsored interview, Casey Ellis chats with Socket founder Feross Aboukhadijeh about npm 12’s move to disable install scripts by default. Attackers are already shifting payloads into package source code, and Feross explains why teams need to understand what third-party code actually does before allowing it into their environments.
Show notes from Risky Business News.
Explained
The technology and terms in this story. Learn more