Uploaded August 2026 | Updated September 2026, 2 weeks ago
Feross Aboukhadijeh, founder and CEO of Socket, explains why AI coding agents pull in 50% more open source dependencies than human developers, and the new attack surface that creates, including models hallucinating package names that attackers then register and wait for agents to install. He breaks down why traditional security scanners that only check for known vulnerabilities miss most real threats, why popularity metrics like GitHub stars and download counts can be faked, and walks through the actual signals Socket looks at instead: what the code accesses, what it reads, and what it does when it runs.
Anne Dwane sits down with Feross to get into practical guardrails for non-technical "vibe coders," why prompt injection hasn't become the dominant attack vector he expected, the mechanics of the massive Axios credential theft, and concrete steps any organization can take right now, like setting a minimum release age on new code.
This is an excerpt from our full conversation with Feross Aboukhadijeh. Watch the full episode here: youtu.be/TMC6S7Vjf1A
00:00 Why coding agents pull in 50% more open source code
02:23 How attackers exploit AI's tendency to hallucinate packages
04:50 Why gameable metrics like stars and downloads can't be trusted
06:52 A framework for guardrails around vibe coding
09:11 Why prompt injection hasn't taken off like expected
11:02 Inside the Axios attack and its 300GB credential haul
13:06 What to do if you're hit by a supply chain attack
15:39 Why security is now a board-level concern
Feross Aboukhadijeh, founder and CEO of Socket, explains why AI coding agents pull in 50% more open source dependencies than human developers, and the new attack surface that creates, including models hallucinating package names that attackers then register and wait for agents to install. He breaks down why traditional security scanners that only check for known vulnerabilities miss most real threats, why popularity metrics like GitHub stars and download counts can be faked, and walks through the actual signals Socket looks at instead: what the code accesses, what it reads, and what it does when it runs.
Anne Dwane sits down with Feross to get into practical guardrails for non-technical "vibe coders," why prompt injection hasn't become the dominant attack vector he expected, the mechanics of the massive Axios credential theft, and concrete steps any organization can take right now, like setting a minimum release age on new code.
This is an excerpt from our full conversation with Feross Aboukhadijeh. Watch the full episode here: youtu.be/TMC6S7Vjf1A
00:00 Why coding agents pull in 50% more open source code
02:23 How attackers exploit AI's tendency to hallucinate packages
04:50 Why gameable metrics like stars and downloads can't be trusted
06:52 A framework for guardrails around vibe coding
09:11 Why prompt injection hasn't taken off like expected
11:02 Inside the Axios attack and its 300GB credential haul
13:06 What to do if you're hit by a supply chain attack
15:39 Why security is now a board-level concern
