Skip to content
Artwork for Risky Bulletin
Risky Bulletin · Yesterday · 17 min

Sponsored: What npm 12 fixes… and what it doesn’t

In this Risky Business sponsored interview, Casey Ellis chats with Socket founder Feross Aboukhadijeh about npm 12’s move to disable install scripts by default. Attackers are already shifting payloads into package source code, and Feross explains why teams need to understand what third-party code actually does before allowing it into their environments. Show notes

0:00-17:54

transcript

No transcript — this publisher did not publish one.

show notes

In this Risky Business sponsored interview, Casey Ellis chats with Socket founder Feross Aboukhadijeh about npm 12’s move to disable install scripts by default. Attackers are already shifting payloads into package source code, and Feross explains why teams need to understand what third-party code actually does before allowing it into their environments.

Show notes