npm’s Biggest Supply Chain Attack (and What We Learned)

Front-End Fire

In this episode:

• Storybook 10 goes all in on ESM for big performance gains
• npm had a massive supply chain attack
• And Brave found a big security vulnerability in Comet

Timestamps:

• 1:12 - Storybook 10
• 7:53 - npm’s supply chain attack
• 17:24 - Brave discloses a security vulnerability in Comet
• 26:38 - You’re absolutely right!
• 35:26 - What’s making us happy

Links:

• Paige - Storybook 10 beta and Storybook 9 features
• Jack - npm just suffered the largest supply chain attack in its history
• TJ - Brave discloses a security vulnerability in Comet
• Someone made a customizable website to count how many times Claude Code says “You’re absolutely right!” in a day
• Paige - Silicon Valley TV show
• Jack - Shokz OpenComm2 bone conduction headphones
• TJ - macOS text message forwarding

Thanks as always to our sponsor, the Blue Collar Coder channel on YouTube. You can join us in our Discord channel, explore our website and reach us via email, or talk to us on X, Bluesky, or YouTube.

• Front-end Fire website
• Blue Collar Coder on YouTube
• Blue Collar Coder on Discord
• Reach out via email
• Tweet at us on X @front_end_fire
• Follow us on Bluesky @front-end-fire.com
• Subscribe to our YouTube channel @Front-EndFirePodcast