WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
WeAreDevelopers LIVE • Aug 5, 2026

WeAreDevelopers LIVE - Node and Package Security

Chris Heilmann , Daniel Cranney , Zbyszek Tenerowicz

Are malicious post-install scripts threatening your JavaScript projects? Stop attackers in their tracks. Learn how to neutralize supply chain vulnerabilities using LavaMoat Harden and strict node permissions.

Pause
Mute Enter Fullscreen
#1 about 4 min

Defining the product marketing manager role in tech

How product marketing aligns external audience perception with internal company goals.

#2 about 7 min

Viability of open-source mobile operating systems

The challenges of building alternatives to mainstream mobile platforms and adapting to modular hardware.

#3 about 9 min

Regulating deepfake content and AI transparency in Europe

How the European Union enforces labels on AI-generated content to protect digital identities.

#4 about 7 min

Balancing AI automation with human curation in content creation

Strategies for utilizing AI to draft content while maintaining quality and authentic human intent.

#5 about 7 min

Eliminating cookie banners through browser-level privacy settings

How European regulations aim to replace disruptive cookie banners with standardized browser consent.

#6 about 2 min

Preventing web scraping using ligature-based typography tricks

The accessibility trade-offs of hiding text from AI scrapers using visual font overlays.

#7 about 5 min

Exploring community-built data analysis tools and visualizations

A look at creative side projects like Wikipedia image searchers and the IKEA complexity index.

#8 about 7 min

Measuring password vulnerability against future quantum computing threats

How cryptographic researchers compete to optimize algorithms for quantum-based password cracking.

#9 about 2 min

Reverting destructive Unix commands with the Undo utility

How the Undo tool leverages shell hooks to recover from accidental command-line deletions.

#10 about 6 min

Testing technology knowledge with a tech news trivia game

A trivia segment challenging guests to identify real versus fabricated software and technology headlines.

#11 about 5 min

Securing package managers using the Lavamoat Harden project

Automating package manager configuration to mitigate supply chain attacks and malicious installation scripts.

#12 about 4 min

Automating staged publishing for secure package releases

Using custom bookmarklets to streamline two-factor authentication and staged publishing workflows on npm.

#13 about 10 min

Limiting script execution permissions in Node and package managers

Restricting disk and network access for package scripts to prevent unauthorized data exfiltration.

Matching moments

14:53 min

Audience questions on tool configurations and package locks

Zbyszek Tenerowicz · LIVE

5:34 min

Addressing audience concerns on licensing and privacy

Thomas Dohmke Thomas Dohmke · WWC 2022

2:30 min

Bridging the gap between developers and security tools

Bozidar Spirovski Bozidar Spirovski +1 · Coffee With Developers

3:58 min

Exploring advanced security tooling and community dependency vetting

Niels Tanis Niels Tanis · WWC 2024

9:35 min

Audience questions on model security and continuous fuzzing

Natalie Pistunovich · LIVE

2:32 min

Dependency risks in widespread NPM supply chain attacks

Chris Heilmann +2 · LIVE

More from WeAreDevelopers LIVE

Aliens in Quarantine, Python Deprecates Loops, and AI Buys Old Books - Zbyszek Tenerowicz thumbnail
5:43
5 days ago

Aliens in Quarantine, Python Deprecates Loops, and AI Buys Old Books - Zbyszek Tenerowicz

Chris Heilmann, Daniel Cranney

WeAreDevelopers LIVE - Streaming HTML thumbnail
1:10:26
12 days ago

WeAreDevelopers LIVE - Streaming HTML

Chris Heilmann, Daniel Cranney, Jad Joubran

WeAreDevelopers LIVE - CODE100 at WeAreDevelopers Europe thumbnail
1:02:34
19 days ago

WeAreDevelopers LIVE - CODE100 at WeAreDevelopers Europe

Chris Heilmann, Daniel Cranney, Justin Halsall, Werner Jeschko, Nicole Jeschko, Mirco Tomić

WeAreDevelopers LIVE - Web Performance in an AI World thumbnail
1:07:59
26 days ago

WeAreDevelopers LIVE - Web Performance in an AI World

Chris Heilmann, Daniel Cranney

FIFA Hack, Midjourney Does Ultrasounds, and Trampoline Traffic Lights - Nicole Jeschko and Werner Jeschko thumbnail
5:55
about 2 months ago

FIFA Hack, Midjourney Does Ultrasounds, and Trampoline Traffic Lights - Nicole Jeschko and Werner Jeschko

Chris Heilmann, Daniel Cranney

WeAreDevelopers LIVE - Back to CODE100 thumbnail
53:17
about 2 months ago

WeAreDevelopers LIVE - Back to CODE100

Chris Heilmann, Daniel Cranney

Upcoming sessions on this topic

Open session

World Congress 2026 North America

On the Public Clock: Open-Source Defense When You're Not in the Club

Nicholas Muy

VP Engineering Platform and Security at Scrut.io

Nicholas Muy
Open session

World Congress 2026 North America

Stop Running Mystery Meat in Production

Jeroen van Erp

Technical Advocate @ SUSE

Jeroen van Erp
Open session

World Congress 2026 North America

rm -rf: Horror Stories From Unsandboxed AI Agents (and How Docker Fixes This)

Rishab Kumar

Staff Developer Evangelist @ Twilio

Rishab Kumar
Open session

World Congress 2026 North America

The Things Your AI Isn't Telling You

Desmond Lamptey

Lead Software Engineer @ Capital One

Desmond Lamptey
Open session

World Congress 2026 North America

SecurePrompt: Building a Pre-Flight Security Layer for Agentic AI

Ravi Sastry Kadali

AI/ML Engineer at General Motors

Ravi Sastry Kadali
Open session

World Congress 2026 North America

Securing AI Agent Infrastructure: Identity, Attestation, and Trust at Scale

Abdel Fane

Founder of OpenA2A

Abdel Fane

Related videos

Oops! Stories of supply chain shenanigans thumbnail
43:57
LIVE • almost 5 years ago

Oops! Stories of supply chain shenanigans

Zbyszek Tenerowicz

Coffee with Developers with Feross Aboukhadijeh of Socket about the xz backdoor thumbnail
42:55
Coffee With Developers • over 2 years ago

Coffee with Developers with Feross Aboukhadijeh of Socket about the xz backdoor

Feross Aboukhadijeh

WeAreDevelopers LIVE - Back to CODE100 thumbnail
53:17
LIVE • about 2 months ago

WeAreDevelopers LIVE - Back to CODE100

Chris Heilmann, Daniel Cranney

WeAreDevelopers LIVE: Scammer Payback with Python, Grok Goes Unhinged, The Future of Chromium and mo thumbnail
1:01:44
LIVE • over 1 year ago

WeAreDevelopers LIVE: Scammer Payback with Python, Grok Goes Unhinged, The Future of Chromium and mo

Dan Cranney, Chris Heilmann, Brian Rountree

WeAreDevelopers LIVE – Keeping Up with Styles, Data & More thumbnail
1:16:52
LIVE • 6 months ago

WeAreDevelopers LIVE – Keeping Up with Styles, Data & More

Chris Heilmann, Daniel Cranney, Peter Kröner

WeAreDevelopers LIVE - Chrome for Sale? Comet - the upcoming perplexity browser Stealing and leaking thumbnail
56:03
LIVE • over 1 year ago

WeAreDevelopers LIVE - Chrome for Sale? Comet - the upcoming perplexity browser Stealing and leaking

Chris Heilmann, Daniel Cranney, Ramona Schwering

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.