DOP 366: How to Prevent npm Supply Chain Attacks
npm install runs arbitrary code before you blink. David Mytton on install scripts, pinning, dependency cooldowns, and defense in depth.
Listen NowDevOps Paradox is a weekly podcast co-hosted by Darin Pope and Viktor Farcic about all things DevOps.
npm install runs arbitrary code before you blink. David Mytton on install scripts, pinning, dependency cooldowns, and defense in depth.
Listen Now
Nvidia buys Hugging Face, Stripe takes OpenRouter, Kubernetes 1.37 ships scale to zero, and why your agent should never hold a password.
Watch Now