WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
WeAreDevelopers LIVE • Aug 5, 2026

WeAreDevelopers LIVE - Node and Package Security

Chris Heilmann , Daniel Cranney , Zbyszek Tenerowicz

Are malicious post-install scripts threatening your JavaScript projects? Stop attackers in their tracks. Learn how to neutralize supply chain vulnerabilities using LavaMoat Harden and strict node permissions.

Pause
Mute Enter Fullscreen
#1 about 4 min

Defining the product marketing manager role in tech

How product marketing aligns external audience perception with internal company goals.

#2 about 7 min

Viability of open-source mobile operating systems

The challenges of building alternatives to mainstream mobile platforms and adapting to modular hardware.

#3 about 9 min

Regulating deepfake content and AI transparency in Europe

How the European Union enforces labels on AI-generated content to protect digital identities.

#4 about 7 min

Balancing AI automation with human curation in content creation

Strategies for utilizing AI to draft content while maintaining quality and authentic human intent.

#5 about 7 min

Eliminating cookie banners through browser-level privacy settings

How European regulations aim to replace disruptive cookie banners with standardized browser consent.

#6 about 2 min

Preventing web scraping using ligature-based typography tricks

The accessibility trade-offs of hiding text from AI scrapers using visual font overlays.

#7 about 5 min

Exploring community-built data analysis tools and visualizations

A look at creative side projects like Wikipedia image searchers and the IKEA complexity index.

#8 about 7 min

Measuring password vulnerability against future quantum computing threats

How cryptographic researchers compete to optimize algorithms for quantum-based password cracking.

#9 about 2 min

Reverting destructive Unix commands with the Undo utility

How the Undo tool leverages shell hooks to recover from accidental command-line deletions.

#10 about 6 min

Testing technology knowledge with a tech news trivia game

A trivia segment challenging guests to identify real versus fabricated software and technology headlines.

#11 about 5 min

Securing package managers using the Lavamoat Harden project

Automating package manager configuration to mitigate supply chain attacks and malicious installation scripts.

#12 about 4 min

Automating staged publishing for secure package releases

Using custom bookmarklets to streamline two-factor authentication and staged publishing workflows on npm.

#13 about 10 min

Limiting script execution permissions in Node and package managers

Restricting disk and network access for package scripts to prevent unauthorized data exfiltration.

Matching moments

14:53 min

Audience questions on tool configurations and package locks

Zbyszek Tenerowicz · LIVE

2:56 min

Managing risks in CI/CD pipelines and supply chains

Christian Heilmann Christian Heilmann +1 · World Congress 2026 North America

5:34 min

Addressing audience concerns on licensing and privacy

Thomas Dohmke Thomas Dohmke · World Congress 2022

2:12 min

Exploiting npm lifecycle scripts during software installation

Chris DeMars Chris DeMars · World Congress 2026 North America

2:30 min

Bridging the gap between developers and security tools

Bozidar Spirovski Bozidar Spirovski +1 · Coffee With Developers

3:58 min

Exploring advanced security tooling and community dependency vetting

Niels Tanis Niels Tanis · World Congress 2024

More from WeAreDevelopers LIVE

WeAreDevelopers LIVE - Tech Education in Two Languages thumbnail
1:00:18
6 days ago

WeAreDevelopers LIVE - Tech Education in Two Languages

Daniel Cranney, Roxy Rodriguez-Becker

WeAreDevelopers LIVE - Playing in Production thumbnail
1:06:40
13 days ago

WeAreDevelopers LIVE - Playing in Production

Andrew MacLean, Daniel Cranney, Christian Heilmann

WeAreDevelopers LIVE - Is CSS Catching Up to Flash? thumbnail
1:03:33
27 days ago

WeAreDevelopers LIVE - Is CSS Catching Up to Flash?

Chris Heilmann, Daniel Cranney, Bramus Van Damme

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along thumbnail
1:21:17
about 1 month ago

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along

Chris Heilmann, Daniel Cranney, Krzysztof Cieślak

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak thumbnail
4:23
about 1 month ago

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak

Chris Heilmann, Daniel Cranney

WeAreDevelopers LIVE - Open Source Agent Toolkits thumbnail
1:00:38
about 1 month ago

WeAreDevelopers LIVE - Open Source Agent Toolkits

Chris Heilmann, Daniel Cranney, Eddie Jaoude

Upcoming sessions on this topic

Open session

Supply Chain Security for the Everyday Engineer

  • Pradumna Saraf

    Kestra Technologies

    Quality Assurance Engineer

Open session

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

  • Vikram Vaswani

    Consultant

Open session

Shipping MCP to Real Users: Scaling, Auth, and the PII Leak You Didn't See Coming

  • Hadar Geva

    Myop

    CTO & Co-founder

Open session

What I Got Wrong Shipping an MCP Server for Live Infrastructure

  • Pritesh Kiri

    Harness

    Developer Relations Engineer

Open session

Build a Zero-Cost AI Agent in Your Browser

  • Aishwarya Mathuria

    Adobe

    Computer Scientist

  • Nishant Thakur

    Adobe

    Senior Computer Scientist

Open session

Autopsy of an Autonomous Incident: When the Agent Made It Worse

  • Navin Pai

    StackGen

    Director of Engineering

Related videos

Oops! Stories of supply chain shenanigans thumbnail
43:57
LIVE • about 5 years ago

Oops! Stories of supply chain shenanigans

Zbyszek Tenerowicz

Coffee with Developers with Feross Aboukhadijeh of Socket about the xz backdoor thumbnail
42:55
Coffee With Developers • over 2 years ago

Coffee with Developers with Feross Aboukhadijeh of Socket about the xz backdoor

Feross Aboukhadijeh

WeAreDevelopers LIVE - Back to CODE100 thumbnail
53:17
LIVE • 4 months ago

WeAreDevelopers LIVE - Back to CODE100

Chris Heilmann, Daniel Cranney

WeAreDevelopers LIVE: Scammer Payback with Python, Grok Goes Unhinged, The Future of Chromium and mo thumbnail
1:01:44
LIVE • over 1 year ago

WeAreDevelopers LIVE: Scammer Payback with Python, Grok Goes Unhinged, The Future of Chromium and mo

Dan Cranney, Chris Heilmann, Brian Rountree

WeAreDevelopers LIVE – Keeping Up with Styles, Data & More thumbnail
1:16:52
LIVE • 8 months ago

WeAreDevelopers LIVE – Keeping Up with Styles, Data & More

Chris Heilmann, Daniel Cranney, Peter Kröner

WeAreDevelopers LIVE - Chrome for Sale? Comet - the upcoming perplexity browser Stealing and leaking thumbnail
56:03
LIVE • over 1 year ago

WeAreDevelopers LIVE - Chrome for Sale? Comet - the upcoming perplexity browser Stealing and leaking

Chris Heilmann, Daniel Cranney, Ramona Schwering

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.