About this episode

Richard Campbell discusses evolving supply-chain attacks and how to protect software supply chains with Mackenzie Jackson.

How are supply-chain attacks evolving? Richard chats with Mackenzie Jackson about his work helping companies protect their software supply chains from malware attacks. Mackenzie discusses the vulnerability of developers to attacks, since their accounts are often highly privileged and invariably contain access to exploitable secrets. The conversation digs into the challenges of securing various code distribution mechanisms like npm and how you can protect your organization - starting with, don't install packages as soon as they are released! There are effective tools for detecting malware in code, but they take time. Waiting 48 hours can eliminate a lot of risk!

People in this episode

Host: Richard Campbell

Guest: Mackenzie Jackson

Topics covered

• supply chain attacks
• malware protection
• software security
• developer vulnerabilities
• code distribution
• risk management

Keywords

• supply chain
• malware
• software security
• developer vulnerabilities
• npm
• code distribution
• risk management

Mentioned in this episode

Organizations: npm

More episodes of RunAs Radio

• Finding Security Vulnerabilities using AI with Sami Laiho · July 14, 2026 · 38 min
• Implementing Azure Policies with Barbara Forbes · July 7, 2026 · 36 min
• Securing Developers with Tanya Janca · June 23, 2026 · 34 min
• 47 Day Certificates with Todd Gardner · June 16, 2026 · 38 min

Explore listener stats, chart rankings, contacts and more on the RunAs Radio podcast page.