DOP 366: How to Prevent npm Supply Chain Attacks

DevOps Paradox by Darin Pope

Sep 2, 202652:52Technology

: You ran npm install this morning. Maybe you ran it a dozen times. Every one of those pulled down a dependency tree you have never read, from a registry that spent years in maintenance mode, and then executed whatever p...

Related Episodes

Continue listening to more episodes from DevOps Paradox.

DOP 365: What the DORA AI ROI Report Really Says

Aug 26, 2026 - 48:20

: A bad engineer with a laptop is much worse than a bad engineer with a calculator. Now hand that enginee...

DOP 364: How to Avoid Burnout as a Leader

Aug 19, 2026 - 48:03

: Your CEO comes back from a leadership offsite talking about burnout-proof leadership and AI transformat...

DOP 363: Is Your Website Agent-Ready?

Aug 12, 2026 - 44:24

: Three waves of the web, and you are late for the third one. The 90s were about getting a browser to ren...

DOP 362: Feature Flags vs Canary Deployments

Aug 5, 2026 - 48:13

: Feature flags or canary deployments - do you need both? Viktor puts it to Alex Casalboni from Unleash,...

DOP 361: When Code Got Cheap, Reviewing Got Expensive

Jul 29, 2026 - 41:51

: Picture a 6,000-line pull request landing in your project from someone you've never heard of. Every tes...

DOP 360: What Is an AI SRE?

Jul 22, 2026 - 54:26

: Assume your production systems go sideways at 3:00am. Your phone doesn't ring. You wake up to a clean i...

DOP 359: Demos in the Age of AI Agents

Jul 15, 2026 - 42:26

: When was the last time you sat through a 30-minute product demo and walked away actually knowing anythi...

DOP 358: Just-in-Time Access for AI Agents

Jul 8, 2026 - 50:09

: Production is on fire. You need access to one table you have never touched. So you file an access reque...