Sponsored: What npm 12 fixes… and what it doesn’t
Risky Bulletin · Aug 16, 2026 · 17:54
Risky Bulletin · Aug 16, 2026 · 17:54
Listen in the Podli app 🎧
Follow your favourite podcasts, listen offline and in the car with CarPlay and Android Auto, and always pick up where you left off. Free to try.
In this Risky Business sponsored interview, Casey Ellis chats with Socket founder Feross Aboukhadijeh about npm 12’s move to disable install scripts by default. Attackers are already shifting payloads into package source code, and Feross explains why teams need to understand what third-party code actually does before allowing it into their environments.
Show notes