npm Podcast Summaries
npm on Yedapo: 2 summarized podcast and YouTube episodes. Each includes key takeaways, core concepts and notable quotes with timestamps.
the WORST hack of 2026
NetworkChuck
Mar 31, 2026
A sophisticated supply chain attack compromised the Axios HTTP library, allowing attackers to deploy remote access Trojans via a malicious dependency. By hijacking a maintainer's NPM token, the attackers bypassed standard security guardrails to infect systems in under 1.1 seconds, leaving no trace behind after self-deleting the malicious code.
Key insight: The average NPM project trusts between 200 and 2,100 strangers with code execution, creating a massive, invisible attack surface where a single compromised dependency can grant attackers total system access.
Você Usa NPM? Alerta Grave
Filipe Deschamps
Sep 9, 2025
Hackers comprometeram pacotes populares no npm com mais de 2 bilhões de downloads semanais. O ataque via phishing resultou em um malware que desvia transações de criptomoedas, demonstrando a fragilidade das cadeias de dependência de código.
Key insight: O volume total dos pacotes infectados soma 2,7 bilhões de downloads semanais, sendo 207 vezes maior que o volume semanal do Next.js.