Episode Player
328: What you should know about Shai-Hulud and its impact on npm (with Chainguard's Dan Lorenc)
What the Dev?
What the Dev?
328: What you should know about Shai-Hulud and its impact on npm (with Chainguard's Dan Lorenc)
Sep 30, 2025
In this episode, Jenna interviews Dan Lorenc, CEO of Chainguard, about the Shai-Hulud worm that has made its way through the npm ecosystem.
They discuss:
- What Shai-Hulud is and why it's so bad
- Security measures GitHub plans to implement in npm
- Best practices to follow to mitigate risk
