Open Source Malware, NPM, and the Risk of Helpful AI
Analysis of rising open source malware in NPM and PyPi, with AI increasing software supply chain risks.
Ned Bellavance — Veteran IT professional and founder of Ned in the Cloud, creating courses, podcasts, and technical content on cloud and infrastructure.
205 articles from this blog
Analysis of rising open source malware in NPM and PyPi, with AI increasing software supply chain risks.
Explores platform engineering, DevEx, infrastructure as code, and AI's role in day-two operations through a practical conversation with cloud engineer Annem Shah.
Author shares their experience and study strategy for passing Microsoft's AI-900 Azure AI Fundamentals certification exam.
An infrastructure engineer explores AI Engineering, defining the role and its focus on using pre-trained models, prompt engineering, and practical application building.
A tech professional outlines his 2026 plans, focusing on creating content around Terraform, Kubernetes, WebAssembly, and OpenTelemetry.
A cloud educator's 2025 year-in-review, analyzing revenue trends, content creation efforts, and business strategy for his tech-focused platform.
Explores ephemeral resources and write-only arguments in Terraform's Vault provider for secure secret management.
Explains Terraform 1.11's write-only arguments, a feature for handling sensitive data in ephemeral resources without persisting it to state.
Explains Terraform 1.10's new ephemeral values for outputs, variables, and resources to prevent sensitive data from being stored in state or plan files.
Interview with Dr. Nick Feamster on network measurement, machine learning, and the Internet Equity Initiative's work on broadband access.
A tech content creator outlines his 2025 goals, including plans for YouTube series on Terraform, home lab projects, WebAssembly, and AI livestreams.
A personal year-in-review from a technical educator, covering revenue, content creation, and trends in DevOps and cloud tools like Terraform.
A guide to deploying Azure Landing Zones using Terraform, covering the module's structure, purpose, and a practical deployment walkthrough.
A summary of HashiConf 2024, covering major announcements like Terraform Stacks and the event's focus on Infrastructure and Security Lifecycle Management.
Overview of the new features and breaking changes in AzureRM Provider v4 for Terraform, including provider-defined functions and resource registration.
A guide to setting up VSCode for debugging the AzureRM Terraform provider using Go and delve.
A guide to encrypting state data and plan files using the new encryption feature in OpenTofu 1.7, covering its purpose and implementation.
A guide exploring the reasons, benefits, and process of migrating from Terraform to the open-source fork, OpenTofu.
Explains how to use new provider-defined functions in Terraform 1.8, including syntax and examples like AWS's arn_parse.
Explores new variable validation capabilities in Terraform 1.9, allowing dynamic checks using other variables and resources.