Sign up or log in to watch the video
Oops! Stories of supply chain shenanigans
Zbyszek Tenerowicz - 4 years ago
We know a lot about vulnerable packages in NPM registry. But (surprisingly) few malicious packages have surfaced to date. Makes you feel like you don't really need to protect your project against them. Well, I'm here to destroy that cozy feeling >:D I will demonstrate how a malicious package could affect your application, even if some security measures are already in place. After the exploits, I'll explain how to prevent the attacks without missing out on the benefits of packages using postinstall scripts for valid reasons. Watch this if you love horror stories! Watch this if you care about avoiding horror stories!
Jobs with related skills
Web Developer:innen C# (w/m/d)
Instaffo
·
today
Nürnberg, Germany
PHP Entwickler / Backend Entwickler / Backend Developer (m/w/d) - Shopware
Instaffo
·
today
Schwaigern, Germany
Staff Engineer (w/m/d) Mobile Games
Instaffo
·
today
Bad Nauheim, Germany
Senior Full Stack Web Developer:in (w/m/d)
Instaffo
·
today
Bad Nauheim, Germany
Related Videos