Listen to a podcast, please open Podcast Republic app. Available on Google Play Store and Apple App Store.
| Episode | Date |
|---|---|
|
GitHub Breach: Inside the Team PCP Supply Chain Breach
|
May 21, 2026 |
|
Shai-Hulud is Back: TanStack & Mistral AI Breach by TeamPCP Mini Worm
|
May 13, 2026 |
|
From Trivy to LiteLLM: The Domino Effect of TeamPCP’s Attack
|
Mar 30, 2026 |
|
Inside ShaiHulud 2.0: The Supply-Chain Worm That Read Your Secrets
|
Nov 27, 2025 |
|
The OpenVSX Supply Chain Attack: Invisible Malware in VS Code - Bad Dependencies Podcast
|
Oct 27, 2025 |
|
Discovering Shai-Hulud and the Struggle to Raise the Alarm: Bad Dependencies ft Daniel Pereira
|
Sep 18, 2025 |
|
Yep, I Got Pwned: A Candid Chat With The Chalk & Debug Maintainer
|
Sep 17, 2025 |
|
The NX S1ingularity Attack: Secrets in Plain Sight
|
Aug 29, 2025 |
|
Phishing Attacks on NPM, Accidental Stylus Removal and Aikido Safe Chain: Bad Dependencies Episode 4
|
Jul 31, 2025 |
|
Bad Dependencies Episode 3: Malware, Bug Bounties, and the Ethics of Offense
|
Jul 08, 2025 |
|
Bad Dependencies – Episode 2: The React Native Aria Backdoor Meltdown
|
Jun 20, 2025 |
|
Bad Dependencies: JPEGs, JavaScript, and Janky Malware: Image-Based Attacks in NPM
|
Jun 02, 2025 |