- All your packages are belong to us

AI agents can write the code, choose the packages, and run the install. Who's checking what they just invited onto your machine? This week I'm joined by Ahmad Nassri, CTO of Socket and former CTO of npm. We get into the trust built into a package install, the new ways attackers are using agents, and what it takes to keep building without handing over the keys or your wallet.