npm, every mention
7 scenes · ← back to npm
tap a year for its mentions
every year anyone Joel de la Garza 6Feross Aboukhadijeh 5Ali Yahya 2Sonal Chokshi 1
Verbatim, from the transcripts: the passages where npm comes up
AI Is Learning to Hack. Faster Than We Expected.
- ▶ 0:21 Feross Aboukhadijeh For a long time, people had talked about this concept of an NPM worm, this idea that
- ▶ 12:56 Joel de la Garza Um, I think right now as we're recording this, there's currently an ongoing active breach of, of a big NPM repo. 6 times in the scene
- ▶ 17:00 Feross Aboukhadijeh So one thing that is positive, and it hasn't shipped yet, but NPM has announced that they are planning to, I think it's in January, 20, 27, going to require, uh, human, you know, interactive, uh, uh, confirmation through two FA before any… 3 times in the scene
- ▶ 21:14 Feross Aboukhadijeh Yes, and I noticed the attackers seemed to pick RSA and Black Hat as the times they wanted to start these NPM worms.
a16z Podcast | Cryptonetworks and Cities -- Analogies
a16z Podcast | The Changing Culture of Open Source
- ▶ 0:56 Sonal Chokshi And its package manager, NPM, is the largest ecosystem of open source libraries in the world.