DiscoverWhat the Dev?328: What you should know about Shai-Hulud and its impact on npm (with Chainguard's Dan Lorenc)
328: What you should know about Shai-Hulud and its impact on npm (with Chainguard's Dan Lorenc)

328: What you should know about Shai-Hulud and its impact on npm (with Chainguard's Dan Lorenc)

Update: 2025-09-30
Share

Description

In this episode, Jenna interviews Dan Lorenc, CEO of Chainguard, about the Shai-Hulud worm that has made its way through the npm ecosystem.

They discuss:

  • What Shai-Hulud is and why it's so bad
  • Security measures GitHub plans to implement in npm 
  • Best practices to follow to mitigate risk
Comments 
In Channel
loading
00:00
00:00
x

0.5x

0.8x

1.0x

1.25x

1.5x

2.0x

3.0x

Sleep Timer

Off

End of Episode

5 Minutes

10 Minutes

15 Minutes

30 Minutes

45 Minutes

60 Minutes

120 Minutes

328: What you should know about Shai-Hulud and its impact on npm (with Chainguard's Dan Lorenc)

328: What you should know about Shai-Hulud and its impact on npm (with Chainguard's Dan Lorenc)