Episode
The insider perspective on the event-stream compromise (Interview)
The Changelog: Software Development, Open Source · Dec 5, 2018 · 1 h 09 min
Adam and Jerod talk with Dominic Tarr, creator of event-stream, the IO library that made recent news as the latest malicious package in the npm registry. event-stream was turned malware, designed to target a very specific development environment and harvest account details and private keys from Bitcoin accounts. They talk through Dominic’s backstory as a prolific contributor to open source, his…