WeAreDevelopers LIVE • Aug 5, 2026

WeAreDevelopers LIVE - Node and Package Security

Chris Heilmann , Daniel Cranney , Zbyszek Tenerowicz

Are malicious post-install scripts threatening your JavaScript projects? Stop attackers in their tracks. Learn how to neutralize supply chain vulnerabilities using LavaMoat Harden and strict node permissions.

Starting at 45:21 · Watch from the beginning

WeAreDevelopers LIVE - Node and Package Security thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

14:53 min

Audience questions on tool configurations and package locks

Zbyszek Tenerowicz · LIVE

2:56 min

Managing risks in CI/CD pipelines and supply chains

Christian Heilmann

Christian Heilmann +1 · World Congress 2026 North America

5:34 min

Addressing audience concerns on licensing and privacy

Thomas Dohmke

Thomas Dohmke · World Congress 2022

2:12 min

Exploiting npm lifecycle scripts during software installation

Chris DeMars

Chris DeMars · World Congress 2026 North America

2:30 min

Bridging the gap between developers and security tools

Bozidar Spirovski

Bozidar Spirovski +1 · Coffee With Developers

3:58 min

Exploring advanced security tooling and community dependency vetting

Niels Tanis

Niels Tanis · World Congress 2024

More from WeAreDevelopers LIVE

Humans in the Loop: Storytelling in Tech thumbnail

Humans in the Loop: Storytelling in Tech

Christian Heilmann +2

4 days ago

WeAreDevelopers LIVE: Your Brain Is Lying to You: Cognitive Biases in Development thumbnail

Your Brain Is Lying to You: Cognitive Biases in Development

Last week

Like Peas in a Pod - What Happens When People Clone Your App? thumbnail

Like Peas in a Pod - What Happens When People Clone Your App?

Ivan Kutskir +2

2 weeks ago

WeAreDevelopers LIVE - Read more, Prompt Less thumbnail

Read more, Prompt Less

Christian Heilmann +2

3 weeks ago

WeAreDevelopers LIVE - Tech Education in Two Languages thumbnail

Tech Education in Two Languages

Daniel Cranney +1

Oct 2026

WeAreDevelopers LIVE - Playing in Production thumbnail

Playing in Production

Andrew MacLean +2

Sep 2026

Upcoming sessions on this topic

Supply Chain Security for the Everyday Engineer

Pradumna Saraf

Kestra Technologies

Quality Assurance Engineer

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

Vikram Vaswani

Consultant

Ship Happens: Guardrails for AI-Written Code

Anthony Nguyen

LaunchDarkly

Senior Solutions Engineer

Your AI Wrote the Code. Who Vouches for It?

Siddharth Joshi

GitHub

Senior Customer Success Architect

Shipping MCP to Real Users: Scaling, Auth, and the PII Leak You Didn't See Coming

Hadar Geva

Myop

CTO & Co-founder

Built-In AI in the Browser: Practical Capabilities for Modern Web Apps

Piyush Gupta

Expedia

Senior Engineering Manager

Related videos

Oops! Stories of supply chain shenanigans thumbnail

Oops! Stories of supply chain shenanigans

Zbyszek Tenerowicz

LIVE · Sep 2021

Coffee with Developers with Feross Aboukhadijeh of Socket about the xz backdoor thumbnail

Coffee with Developers with Feross Aboukhadijeh of Socket about the xz backdoor

Feross Aboukhadijeh

Coffee With Developers · Apr 2024

WeAreDevelopers LIVE - Back to CODE100 thumbnail

Back to CODE100

Chris Heilmann +1

LIVE · Jun 2026

WeAreDevelopers LIVE: Scammer Payback with Python, Grok Goes Unhinged, The Future of Chromium and mo thumbnail

Scammer Payback with Python, Grok Goes Unhinged, The Future of Chromium and mo

Dan Cranney +2

LIVE · Jan 2025

WeAreDevelopers LIVE – Keeping Up with Styles, Data & More thumbnail

Keeping Up with Styles, Data & More

Chris Heilmann +2

LIVE · Feb 2026

WeAreDevelopers LIVE - Chrome for Sale? Comet - the upcoming perplexity browser Stealing and leaking thumbnail

Chrome for Sale? Comet - the upcoming perplexity browser Stealing and leaking

Chris Heilmann +2

LIVE · Apr 2025

Related articles

BB

Benedikt Bischof

Walking Into The Era of Supply Chain Risks

Welcome to this issue of the WeAreDevelopers Live Talk series. This article recaps an interesting talk by Vandana Verma who introduced the audience interesting topic of supply chain risks.About the...

over 4 years ago

Walking Into The Era of Supply Chain Risks

CH

Chris Heilmann

Dev Digest 138 - Are you secure about this?

Hello there! This is the 2nd "out of the can" edition of 3 as I am on vacation in Greece eating lovely things on the beach. So, fewer news, but lots of great resources. Many around the topic of sec...

about 2 years ago

Dev Digest 138 - Are you secure about this?

CH

Chris Heilmann

Dev Digest 134 - Where pixels sing?

News and ArticlesWeAreDevelopers LIVE Data and Security Day is on Wednesday, 25/09/2024. Learn about OPC UA Updates, Best Practices for Using GitHub Secrets, Passwordless Web 1.5, Emerging AI Secur...

about 2 years ago

Dev Digest 134 - Where pixels sing?

CH

Chris Heilmann

Dev Digest 131 - AI'm not sure about OSS

News and ArticlesRust and Typescript are rising stars in programming languages 2024 survey, the State of CSS 2024 survey is open and here is what's new in ECMAScript.In security news, a Microsoft u...

about 2 years ago

Dev Digest 131 - AI'm not sure about OSS

From learning to earning

Jobs that call for the skills explored in this talk.

Staff Developer Advocate, GitHub Security Lab

San Francisco, CA, United States

Experienced $323k Git Github Databases

about 2 months ago • Verified

Senior Product Security Architect

Austin, United States

Expert Remote Agentic AI Security Architecture

Product Security Incident Response Analyst

Expert $329k Remote Github Code Review Data Analysis

Staff Engineer - Web Platform

Expert Remote Next.js ReactJS Amazon S3

Senior Software Engineer, Vulnerability Management

Expert $329k Remote Ruby Golang Docker

Staff Security Data Engineer

Experienced Remote Github Airflow Terraform