<p style="text-align: justify;">Modern software relies heavily on open source dependencies, often pulling in thousands of packages maintained by developers all over the world. This accelerates innovation but also creates serious supply chain risks as attackers increasingly compromise popular libraries to spread malware at scale.</p>
<p style="text-align: justify;"><a href="https://x.com/feross">Feross Aboukhadijeh</a> is the founder and CEO of <a href="https://socket.dev/">Socket</a> which is a security platform designed to protect software projects from open source supply chain attacks. In this episode he joins Josh Goldberg to talk about his career in open source, open source supply chain attacks, practical security lessons, the expanding attack surface in software development, and more.</p>
<p><a href="https://i0.wp.com/softwareengineeringdaily.com/wp-content/uploads/2023/11/JoshGoldberg.jpeg"><img data-recalc-dims="1" decoding="async" data-attachment-id="15095" data-permalink="https://softwareengineeringdaily.com/2023/06/06/modern-robotics-platform/pawel/" data-orig-file="https://i0.wp.com/softwareengineeringdaily.com/wp-content/uploads/2023/06/pawel.png?fit=200%2C240&ssl=1" data-orig-size="200,240" data-comments-opened="0" data-image-meta="{"aperture":"0","credit":"","camera":"","caption":"","created_timestamp":"0","copyright":"","focal_length":"0","iso":"0","shutter_speed":"0","title":"","orientation":"0"}" data-image-title="pawel" data-image-description="" data-image-caption="" data-medium-file="https://i0.wp.com/softwareengineeringdaily.com/wp-content/uploads/2023/06/pawel.png?fit=200%2C240&ssl=1" data-large-file="https://i0.wp.com/softwareengineeringdaily.com/wp-content/uploads/2023/06/pawel.png?fit=200%2C240&ssl=1" class="size-full wp-image-15095 alignleft" src="https://i0.wp.com/softwareengineeringdaily.com/wp-content/uploads/2023/11/JoshGoldberg.jpeg?resize=200%2C240&#038;ssl=1" alt="" width="200" height="240" /></a></p>
<div style="text-align: justify;">
<p>Josh Goldberg is an independent full time open source developer in the TypeScript ecosystem. He works on projects that help developers write better TypeScript more easily, most notably on typescript-eslint: the tooling that enables ESLint and Prettier to run on TypeScript code. Josh regularly contributes to open source projects in the ecosystem such as ESLint and TypeScript. Josh is a Microsoft MVP for developer technologies and the author of the acclaimed <a href="https://www.learningtypescript.com/">Learning TypeScript</a> (O’Reilly), a cherished resource for any developer seeking to learn TypeScript without any prior experience outside of JavaScript. Josh regularly presents talks and workshops at bootcamps, conferences, and meetups to share knowledge on TypeScript, static analysis, open source, and general frontend and web development.</p>
<div style="text-align: justify;">
<p><a href="http://softwareengineeringdaily.com/wp-content/uploads/2025/11/SED1868-Socket.txt">Please click here to see the transcript of this episode.</a></p>
</div>
<div style="text-align: justify;">
<p style="text-align: left;">Sponsorship inquiries: <a href="https://cms.megaphone.fm/organizations/619b680e-d813-11ea-9750-e7ecac406436/podcasts/e60108fe-e328-11ea-b2b6-1348249f900a/episodes/3913370a-bc44-11ed-ace6-8b1f96d82bba/sponsor@softwareengineeringdaily.com">sponsor@softwareengineeringdaily.com</a></p>
</div>
</div>
<p>The post <a href="https://softwareengineeringdaily.com/2025/12/09/blocking-software-supply-chain-attacks-with-feross-aboukhadijeh/">Blocking Software Supply Chain Attacks with Feross Aboukhadijeh</a> appeared first on <a href="https://softwareengineeringdaily.com">Software Engineering Daily</a>.</p>


Podurama

Home

Trending

Personal

Your Podcasts

New Episodes

My Files

Favourite Episodes

Tags (Folders)

Recently Played

Bookmarks

Followed Playlists

Blocking Software Supply Chain Attacks with Feross Aboukhadijeh

Podcast Archives - Software Engineering Daily

AI Chapters

AI Insights

Reviews