Web News: The Shai‑Hulud Worm Attack (NPM Hack)

HTML All The Things - Web Development, Web Design, Small Business

Matt Lawrence and Mike Karan, Matt Lawrence, and Mike Karan에서 제공하는 콘텐츠입니다. 에피소드, 그래픽, 팟캐스트 설명을 포함한 모든 팟캐스트 콘텐츠는 Matt Lawrence and Mike Karan, Matt Lawrence, and Mike Karan 또는 해당 팟캐스트 플랫폼 파트너가 직접 업로드하고 제공합니다. 누군가가 귀하의 허락 없이 귀하의 저작물을 사용하고 있다고 생각되는 경우 여기에 설명된 절차를 따르실 수 있습니다 https://ko.player.fm/legal.

13d ago 37:06

MP3•에피소드 홈

In this episode of Web News, Matt and Mike dive into two massive worm attacks that recently hit npm, targeting packages used in millions of projects. While the attackers aimed to steal crypto wallet keys, the actual damage was small—but the implications are enormous. We break down how these man-in-the-middle attacks worked, why shadow dependencies are such a big risk, and what tools like pnpm’s minimum release age can do to help. We also discuss whether AI might allow developers to skip quick one-time npm packages entirely, reducing dependency sprawl and potential vulnerabilities.

Show Notes: https://www.htmlallthethings.com/podcast/the-shai-hulud-worm-attack-npm-hack

425 에피소드