All your packages are belong to us (Interview)

AI agents can write the code, choose the packages, and run the install. Who’s checking what they just invited onto your machine? This week I’m joined by Ahmad Nassri, CTO of Socket and former CTO of npm. We get into the trust built into a package install, the new ways attackers are using agents, and what it takes to keep building without handing over the keys or your wallet.

Join the discussion

Changelog++ members get a bonus 6 minutes at the end of this episode and zero ads. Join today!

Sponsors:

• WorkOS – WorkOS is building the infrastructure for the AI era. Explore three new product previews: Airlock for secure AI agent permissions, Atlas for deploying AI-built internal apps, and Passport for seamless, passwordless access to work apps. See the announcements, demos, and highlights in the WorkOS init() 2026 recap.
• Parallel – Web infrastructure for AI to search, extract, monitor, and reason over the world’s information.
• Deepgram – Speech-to-text, text-to-speech, and voice agent APIs for developers building voice AI applications.
• Fly.io – The home of Changelog.com — Computers for agents, from sandboxes to production. Give your agent its own hardware-isolated Linux computer. Deploy what it builds without changing platforms.

Featuring:

• Ahmad Nassri – Website, GitHub, LinkedIn, X
• Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X

Show Notes:

• The Hidden Blast Radius of the Axios Compromise
• Socket Firewall
• npm trusted publishing
• Shai-Hulud
• Zero Day Clock

Something missing or broken? PRs welcome!