All your packages are belong to us
Source: Changelog ·
AI agents can write the code, choose the packages, and run the install. Who's checking what they just invited onto your machine? This week I'm joined by Ahmad Nassri, CTO of Socket and former CTO of npm. We get into the trust built into a package install, the new ways attackers are using agents, and what it takes to keep building without handing over the keys or your wallet.
Frequently Asked Questions
What is All your packages are belong to us?
All your packages are belong to us is a tool discovery curated from Changelog. AI agents can write the code, choose the packages, and run the install. Who's checking what they just invited onto your machine? This week I'm joined by Ahmad Nassri, CTO of…
How can I access or experience this?
You can experience this content directly on its original host (Changelog) by clicking the "Open Original" button.
Where does this content come from?
Curated from Changelog by the OnSuggest team to surface the most interesting and serendipitous content on the web.
More like this
All Developer tools discoveries →Show HN: Vantage-V-AI – 2-bit ternary KV-cache with attention sinks
🚀 The World's First Stateless Graph Engine for 10^12 Nodes. 1.5M+ rel/sec with 0MB RAM footprint. Pure Math Architecture. - khoadev-vn/VANTAGE-V-AI
Remove Deno Deploy
Remove Deno Deploy Deno Deploy will be sunset in April 2027 https://deno.com/blog/cloudflare
Remove Val Town
Remove Val Town Val Town is shutting down on January 10, 2027 https://blog.val.town/winding-down
Merge pull request #5172 from Arneld18/add-backforms
Merge pull request #5172 from Arneld18/add-backforms Add Backforms to Forms section
Merge pull request #5173 from axww/patch-1
Merge pull request #5173 from axww/patch-1 Remove Deno Deploy
Merge pull request #5174 from axww/patch-2
Merge pull request #5174 from axww/patch-2 Remove Val Town