Inside the Latest npm Attack (with Feross Aboukhadijeh)

The npm ecosystem just faced another major supply-chain attack—and it’s a wake-up call for every team building on open source.

In this episode, we’re joined by Feross Aboukhadijeh, Founder & CEO of Socket, to unpack what happened, how these attacks work, and what developers and enterprises can do to defend against them.

We’ll cover:

✅ How attackers infiltrate npm packages

✅ The ripple effects across the Node.js ecosystem

✅ Why traditional security tools often miss the real threats

✅ Practical steps to secure your dependencies

✅ How open source maintainers and enterprises can collaborate on better defences

If your applications depend on npm (and they almost certainly do), this is a conversation you can’t afford to miss.