#97 - Shift Left, Get Hacked: Supply Chain Attacks Hit Devs
About this episode
The episode discusses the impact of supply chain attacks on developers and ways to enhance security in developer environments.
March 2026 made supply chain attacks feel a lot less theoretical, but what made these incidents different? The hosts discuss compromised publishing credentials, automatic execution hooks like post-install scripts and Python `.pth` files, and how both humans and security tools caught the malicious releases. They also talk through concrete ways to make developer environments harder to abuse. We are always happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.DevSecOps Talks podcast LinkedIn pageDevSecOps Talks podcast websiteDevSecOps Talks podcast YouTube channel
More episodes of The DevSecOps Talks Podcast
- #98 - Beyond AI SRE
- #96 - Keeping Platforms Simple and Fast with Joachim Hill-Grannec
- #95 - From Platform Theater to Golden Guardrails with Steve Wade
- #94 - Small Tasks, Big Wins: The AI Dev Loop at System Initiative
- #93 - The DevSecOps Perspective: Key Takeaways From Re:Invent 2025
- #92 - From System Initiative to SWAMP: Agent-Native Infra with Paul Stack
Explore listener stats, chart rankings, contacts and more on the The DevSecOps Talks Podcast podcast page.