Episode 413 – PyTorch and NPM get attacked, but it’s OK

Josh and Kurt talk about an attack against PyTorch and NPM. The PyTorch attack shows the difficulty of trying to operate a large open source project. The NPM problem is one of the difficulty in trying to backdoor open source. A lot of people are watching and it only takes one person to notice aContinue reading "Episode 413 – PyTorch and NPM get attacked, but it’s OK"

attack backdoor iphone josh large lot npm open source people podcast problem project pytorch security supply chain