Backend>Blogs/Talks

What if the BEAM ecosystem got hit by a worm?

maennchen

maennchen

What if the BEAM ecosystem got hit by a worm?

One package.
One update.
A worm crawling through the BEAM ecosystem.

A dark “what if” — and how we can stop it before it’s real.

2 comments
/elixir#blog-post/security#supply-chain
3 674 2

Most Liked

lucyneebaw

lucyneebaw

The key to stopping this lies in vigilance and collective responsibility within the ecosystem. By ensuring that package maintainers follow strict security protocols, and by encouraging developers to vet dependencies thoroughly, we can minimize vulnerabilities. Tools for automated auditing and monitoring can also play a vital role in catching issues early. Most importantly, fostering a culture where security is prioritized can make all the difference. What do you think—how else can we strengthen the ecosystem?

1
Post #2
dyowee

dyowee

I agree. And I hope it doesn’t happen.

1
Post #3

Where Next?

View thread on forum
elixir
security
blog-post
supply-chain
Home Backend>Blogs/Talks
/elixir#blog-post/security#supply-chain
3 674 2
Last post

Popular Backend topics Top

lpil
Backend>Blogs/Talks

Shayne Tremblay's talk on Gleam at the Denver Elixir Meetup
Shayne gave this excellent talk the other day on Gleam, so I thought I’d share it. From my point of view it was really interesting to se...
youtube.com
#video#talk/gleam
3 1367 0
New
First poster: iPaul
Backend>Blogs/Talks

The Future of Clojure
thoughtworks.com
/clojure#podcasts
3 1823 2
New
First poster: bot
Backend>Blogs/Talks

Haskell is a Bad Programming Language (2020)
Such inflammatory, much wow. Unfortunately, Haskell itself agrees. Some languages naturally lend themselves towards adoption. Some don’t...
blog.shitiomatic.tech
/haskell#programming
0 1782 0
New
First poster: bot
Backend>Blogs/Talks

Quick Overview of Julia language [pdf]
Julia is a scientific programming language that is free and open source.1 It is a relatively new language that borrows inspiration from l...
algorithmsbook.com
/julia
0 1567 0
New
First poster: AstonJ
Backend>Blogs/Talks

What I wish I knew before building a Shopify App
They expect you to make a onepage application (SPA) The polaris design system officially only supports react Integration with the s...
ma.ttias.ch
26 1843 11
New
First poster: brennan
Backend>Blogs/Talks

Java Is Underhyped
The perspective of an ignorant computer science undergrad It’s likely that you read the title of this post and thought “what is this guy ...
jackson.sh
/java
8 1598 4
New
First poster: bot
Backend>Blogs/Talks

From Julia to Rust
I’ve been more serious about learning Rust recently, after dragging on with passive learning for a while. My first real programming langu...
miguelraz.github.io
/julia/rust
2 1623 0
New
wolf4earth
Backend>Blogs/Talks

ElixirMix 142 - Building PWAs in Elixir and Phoenix ft. Tej Pochiraju
Tej Pochiraju joins the mix to discuss Progressive Web Apps and how you can support them using Elixir and Phoenix to control IoT devices....
devchat.tv
/elixir/phoenix/flutter#podcasts#pwa
1 1616 0
New
tonyxrandall
Backend>Blogs/Talks

Migrating From Python to Kotlin for Our Backend Services (DoorDash)
When DoorDash approached the limits of what our Django-based monolithic codebase could support, we needed to design a new stack that woul...
doordash.engineering
/kotlin/python#blog-post#backend
3 3489 0
New
brainlid
Backend>Blogs/Talks

Thinking Elixir 244 - Running Python in Elixir?
Episode 244 of Thinking Elixir. News includes the release of Elixir 1.18.2 with various enhancements and bug fixes, a new experimental SQ...
youtube.com
/elixir/python#podcasts#livebook
1 841 0
New

Other popular topics Top

PragmaticBookshelf
Hybrid>Learning Resources

Programming Flutter
Instantly view the changes you make to an app with stateful hot reload, and define a declarative UI in the same language as the app logic...
pragprog.com
#pragprog/book-programming-flutter#published-book/flutter
11 4501 1
New
siddhant3030
General Dev>Dev Chat

Which vertical monitor do you use?
I’m thinking of buying a monitor that I can rotate to use as a vertical monitor? Also, I want to know if someone is using it for program...
#monitors#programming
51 4892 20
New
dasdom
General Dev>Dev Chat

Standing Desks
No chair. I have a standing desk. This post was split into a dedicated thread from our thread about chairs :slight_smile:
#workspace#opinions
177 9886 77
New
AstonJ
General Dev>Hardware

Custom keyboard keycaps
There’s a whole world of custom keycaps out there that I didn’t know existed! Check out all of our Keycaps threads here: https://forum....
#hardware/keyboards#keycaps#mechanical-keyboards
15 11086 19
New
Maartz
General Dev>Dev Chat

Roc Language - a new purely functional programming language built for speed and ergonomics
Hi folks, I don’t know if I saw this here but, here’s a new programming language, called Roc Reminds me a bit of Elm and thus Haskell. ...
#programminguages#functional-programming
49 5164 14
New
AstonJ
General Dev>Code Editors

Doom-Emacs: Can't find emacs in your PATH
If you get Can't find emacs in your PATH when trying to install Doom Emacs on your Mac you… just… need to install Emacs first! :lol: bre...
#macos/emacs#doom-emacs
4 5837 0
New
PragmaticBookshelf
Community>In The Spotlight

Spotlight: Jamis Buck (Author) Interview and AMA!
Author Spotlight Jamis Buck @jamis This month, we have the pleasure of spotlighting author Jamis Buck, who has written Mazes for Prog...
#author-spotlight/ruby/book-the-ray-tracer-challenge/book-mazes-for-programmers
21 6352 9
New
First poster: bot
General Dev>In The News

Zig now has built-in HTTP server and client in std
zig/http.zig at 7cf2cbb33ef34c1d211135f56d30fe23b6cacd42 · ziglang/zig. General-purpose programming language and toolchain for maintaini...
github.com
/zig#http
0 5624 0
New
PragmaticBookshelf
Backend>Learning Resources

Advanced Functional Programming with Elixir
Use advanced functional programming principles, practical Domain-Driven Design techniques, and production-ready Elixir code to build scal...
joekoski.com
#pragprog/elixir#published-book#functional-programming/book-advanced-functional-programming-with-elixir
43 4989 22
New
PragmaticBookshelf
General Dev>Learning Resources

Write Better with Vale
Lint your docs like code: turn any style guide into enforceable rules with Vale and publish clear, consistent content every time. ...
pragprog.com
#pragprog#published-book#vale/book-write-better-with-vale
8 3707 4
New
Back to top

Sponsor Spotlight

WyewWorks

Enabling companies to succeed by building software people love.

Latest in Elixir

Elixir Portal ❯

Latest in Security

Security Portal ❯

Backend>Blogs/Talks

Backend Blogs/Talks ❯

Latest on Devtalk

Devtalk ❯

We ❤️ helpful members!

We reward our most helpful members via our MOTM scheme - by giving away a whopping 25 books per year!

Member of the Month

Devtalk Sponsors

Pragmatic Bookshelf

Practical resources that improve the lives of professional developers.

Erlang Solutions

We build trusted fault-tolerant systems that scale to billions of users.

Honeybadger

Real-time error tracking, performance insights, and observability for devs.

EEF

Supporting innovation across the BEAM ecosystem.

coders51

We build reliable cloud platforms for business-critical systems.

Manning Publications

Develop your skills with books, videos, and courses.

AppSignal

Catch errors, track performance, monitor hosts and more.

WyeWorks

Enabling companies to succeed by building software people love.

Pragmatic Studio

Courses that move you from confusion to "Aha, now I get it!"

Linux New Media

Publishing Linux Magazine, ADMIN, and MakerSpace for 25+ years.

View all our sponsors ❯

Categories:

Sub Categories:

Popular Portals

Devtalk Sponsors

Pragmatic Bookshelf

Practical resources that improve the lives of professional developers.

Erlang Solutions

We build trusted fault-tolerant systems that scale to billions of users.

Honeybadger

Real-time error tracking, performance insights, and observability for devs.

EEF

Supporting innovation across the BEAM ecosystem.

coders51

We build reliable cloud platforms for business-critical systems.

Manning Publications

Develop your skills with books, videos, and courses.

AppSignal

Catch errors, track performance, monitor hosts and more.

WyeWorks

Enabling companies to succeed by building software people love.

Pragmatic Studio

Courses that move you from confusion to "Aha, now I get it!"

Linux New Media

Publishing Linux Magazine, ADMIN, and MakerSpace for 25+ years.

View all our sponsors ❯

We're in Beta

About us Mission Statement See our Roadmap