RunAs Radio

The episode contains several genuinely non-obvious technical insights - mutable GitHub Actions tags as a retroactive attack vector, Shahlud worms leveraging on-device LLMs for reconnaissance, and Claw Hub skill poisoning - but is diluted by stretches of general security culture commentary and arms-race platitudes.

“the first version of that actually compromised uh, the package called nx. Uh, this is last year. And uh, how the malware operated, uh, is that when the malware ran, it actually looked for an LLM on the victim's machine and used it to do the reconnaissance”

“in GitHub Actions there's something called immutable tags...I can't go back and release version 1.9 again...GitHub Actions. You can. Oh, you can change the tag”

The framing of 'malicious intent is the only remaining barrier' and the 48-hour cooldown as a concrete, free mitigation are fresh and useful; the fog-of-war theory around publishing stolen credentials is genuinely interesting, but the episode also leans on standard 'arms race' and 'assume breach' framing that is well-worn in security podcasts.

“The resources and the technical ability are basically zero now. And you just are left with malicious intent”

“enforce a 48 hour cooldown period before installing any new package...If you do that, 99% of malware won't touch you”

Mackenzie Jackson is an active practitioner at an operational appsec company that detects thousands of malicious packages monthly and ships real tooling (Safe Chain), giving him genuine ground-level authority; he is not a pure thought-leader, though his role is more field evangelist than deeply technical researcher at scale.

“at Akita, we obviously have a big research team where we detect a lot of malware. We find thousands of packages every month”

“we still use rule based detection to find indicators of malware...and then use an LLM to make a final classification”

The episode is well-stocked with named artifacts, specific timelines, and concrete mechanisms - the Trivy breach, Shahlud worm variants, Josh Junon's 2.6 billion weekly downloads, the sub-30-minute VS Code extension window, and Claw Hub's top-10 contamination rate - though a few quantitative claims like '99%' are asserted without sourcing.

“he is the maintainer of, uh, several massive projects collectively downloaded 2.6 billion times a week”

“it was compromised for less than half an hour. But just in that time...one, in that window someone from GitHub installed it and then all of their code was stolen”

Richard Campbell is a capable host who steers toward actionable advice and makes useful analogical connections (conditional access scoring paralleling malware heuristics), but he rarely challenges the guest's assertions, sometimes talks at equal length to the guest, and the conversation stays collegial rather than probing.

“I'm hoping we get to a place here, McKenzie, where it's like, here's some things you can do. Because so far we've outlined all the things you should be afraid of”

“That Sounds like something GitHub could fix or at least set a parameter around. Like this is all exotic behavior”