Go offline with the Player FM app!
Web News: The Shai‑Hulud Worm Attack (NPM Hack)
Manage episode 507523550 series 3328123
In this episode of Web News, Matt and Mike dive into two massive worm attacks that recently hit npm, targeting packages used in millions of projects. While the attackers aimed to steal crypto wallet keys, the actual damage was small—but the implications are enormous. We break down how these man-in-the-middle attacks worked, why shadow dependencies are such a big risk, and what tools like pnpm’s minimum release age can do to help. We also discuss whether AI might allow developers to skip quick one-time npm packages entirely, reducing dependency sprawl and potential vulnerabilities.
Show Notes: https://www.htmlallthethings.com/podcast/the-shai-hulud-worm-attack-npm-hack
423 episodes
Web News: The Shai‑Hulud Worm Attack (NPM Hack)
HTML All The Things - Web Development, Web Design, Small Business
Manage episode 507523550 series 3328123
In this episode of Web News, Matt and Mike dive into two massive worm attacks that recently hit npm, targeting packages used in millions of projects. While the attackers aimed to steal crypto wallet keys, the actual damage was small—but the implications are enormous. We break down how these man-in-the-middle attacks worked, why shadow dependencies are such a big risk, and what tools like pnpm’s minimum release age can do to help. We also discuss whether AI might allow developers to skip quick one-time npm packages entirely, reducing dependency sprawl and potential vulnerabilities.
Show Notes: https://www.htmlallthethings.com/podcast/the-shai-hulud-worm-attack-npm-hack
423 episodes
All episodes
×Welcome to Player FM!
Player FM is scanning the web for high-quality podcasts for you to enjoy right now. It's the best podcast app and works on Android, iPhone, and the web. Signup to sync subscriptions across devices.