Risky Bulletin Podcast
August 17, 2026
Sponsored: What npm 12 fixes… and what it doesn’t
Presented by
Casey Ellis
Founder, Bugcrowd
In this Risky Business sponsored interview, Casey Ellis chats with Socket founder Feross Aboukhadijeh about npm 12’s move to disable install scripts by default. Attackers are already shifting payloads into package source code, and Feross explains why teams need to understand what third-party code actually does before allowing it into their environments.
Sponsored: What npm 12 fixes… and what it doesn’t
0:00 /
17:54
Brought to you by Socket
Secure your dependencies. Ship with confidence.