このエピソードについて
Imagine updating a trusted monorepo tool… and the next time you open your terminal it asks for your password, then tries to shut your machine down. In this episode of SEEK Bytes, Will, Seamus and SEEK Staff Engineer Trevor Kilvington unpack the NX supply chain attacks – how they unfolded, why they were so scary, and what every IT team can learn from them.
This episode's special guest: Trevor Kilvington (SEEK Staff Engineer)
In this episode, we explore:
• How a popular open-source tool ended up shipping malicious code to developers’ laptops and CI pipelines – and how SEEK engineers helped spot it first
• Why attackers leaned on AI prompts and worm-like behaviour to hunt for secrets and quietly spread through NPM packages
• The uncomfortable question of whether keeping everything “always up to date” is still the safest choice – and what this means for CI/CD ownership and developer responsibilities
Whether you’re in software engineering, DevOps, SRE, security, platform or IT leadership, this episode will change how you think about package updates, build pipelines and the tools you trust every day.
👍 Follow the SEEK Bytes podcast so you never miss a new episode
This episode's special guest: Trevor Kilvington (SEEK Staff Engineer)
In this episode, we explore:
• How a popular open-source tool ended up shipping malicious code to developers’ laptops and CI pipelines – and how SEEK engineers helped spot it first
• Why attackers leaned on AI prompts and worm-like behaviour to hunt for secrets and quietly spread through NPM packages
• The uncomfortable question of whether keeping everything “always up to date” is still the safest choice – and what this means for CI/CD ownership and developer responsibilities
Whether you’re in software engineering, DevOps, SRE, security, platform or IT leadership, this episode will change how you think about package updates, build pipelines and the tools you trust every day.
👍 Follow the SEEK Bytes podcast so you never miss a new episode
英語
オーストラリア
文字起こし 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
このポッドキャストの他のエピソード
What if you could spin up a whole AI workforce on your own machine – planners, “engineers”, researchers and content creators – and run it all from a simple chat window? In this episode of SEEK Bytes, we explore OpenClaw, the agent platform that lets you act like the CEO while AI agents do the grunt…
An OpenAI-backed coding agent. 12 elite competitive programmers flown to Tokyo. A 10-hour marathon solving an NP-hard puzzle in front of a live stream. And a very sleep-deprived human still manages to beat the AI at its own game. In this episode of SEEK Bytes, Elliott Millar, Will, Seamus and Arnav…
This is a special SEEK Bytes drop – outside the regular Season 3 line-up – because the recent Axios NPM hack is too important to ignore. In this episode of SEEK Bytes the crew sit down with Eldar Marcussen from SEEK’s offensive security team to unpack what actually happened, why supply-chain attack…
This episode of SEEK Bytes steps away from code to celebrate one of SEEK’s most loved traditions: Hackathon. Will is joined by Kat, Andy and Glenn to lift the lid on how a twice-yearly, three-day event brings together people from every corner of SEEK to dream up bold ideas – many of which end up on…
免責: このページに埋め込まれているポッドキャストとアートワークは SEEK からのものであり、その所有者の所有物であり、Listen Notes, Inc. と提携または承認されていません。
