WeAreDevelopers LIVE • Sep 15, 2021

Oops! Stories of supply chain shenanigans

Zbyszek Tenerowicz

Could an obscure NPM dependency be silently stealing credentials during your build phase? Discover how to neutralize rogue lifecycle scripts and secure your JavaScript supply chain.

Oops! Stories of supply chain shenanigans thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

2:56 min

Managing risks in CI/CD pipelines and supply chains

Christian Heilmann

Christian Heilmann +1 · World Congress 2026 North America

1:50 min

Supply chain security risks in NPM dependency code

martinakraus

martinakraus · World Congress 2024

2:32 min

Dependency risks in widespread NPM supply chain attacks

Chris Heilmann

Chris Heilmann +2 · LIVE

2:12 min

Exploiting npm lifecycle scripts during software installation

Chris DeMars

Chris DeMars · World Congress 2026 North America

1:03 min

Highlighting supply chain vulnerabilities from obfuscated package manager backdoors

Daniel Cranney

Daniel Cranney +1 · LIVE

3:06 min

Mitigating dependency confusion in NPM packages

Jakub Andrzejewski · World Congress 2023

More from WeAreDevelopers LIVE

Humans in the Loop: Storytelling in Tech thumbnail

Humans in the Loop: Storytelling in Tech

Christian Heilmann +2

3 days ago

WeAreDevelopers LIVE: Your Brain Is Lying to You: Cognitive Biases in Development thumbnail

Your Brain Is Lying to You: Cognitive Biases in Development

Last week

Like Peas in a Pod - What Happens When People Clone Your App? thumbnail

Like Peas in a Pod - What Happens When People Clone Your App?

Ivan Kutskir +2

2 weeks ago

WeAreDevelopers LIVE - Read more, Prompt Less thumbnail

Read more, Prompt Less

Christian Heilmann +2

3 weeks ago

WeAreDevelopers LIVE - Tech Education in Two Languages thumbnail

Tech Education in Two Languages

Daniel Cranney +1

Oct 2026

WeAreDevelopers LIVE - Playing in Production thumbnail

Playing in Production

Andrew MacLean +2

Sep 2026

Upcoming sessions on this topic

Supply Chain Security for the Everyday Engineer

Pradumna Saraf

Kestra Technologies

Quality Assurance Engineer

Ship Happens: Guardrails for AI-Written Code

Anthony Nguyen

LaunchDarkly

Senior Solutions Engineer

What I Got Wrong Shipping an MCP Server for Live Infrastructure

Pritesh Kiri

Harness

Developer Relations Engineer

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

Vikram Vaswani

Consultant

DevOps for React Developers: From Code to Production

Kristiyan Velkov

Docker

Front-End Advocate | Speaker | AI & DevOps Enthusiast | Docker Captain | Tech Blogger | Book Author | 100+ IT Certifications | 30K+ Followers

From Monolith to Phases: Restructuring Terraform Deployments That Work in Any Cloud

Naveen Kumar Kalapala

Infosys Ltd

Lead Cloud Engineer

Related videos

Silent Execution: Defending Against Install-Time Supply Chain Attacks thumbnail

Silent Execution: Defending Against Install-Time Supply Chain Attacks

Chris DeMars · TuxCare

World Congress North America · 2026

Coffee with Developers with Feross Aboukhadijeh of Socket about the xz backdoor thumbnail

Coffee with Developers with Feross Aboukhadijeh of Socket about the xz backdoor

Feross Aboukhadijeh

Coffee With Developers · Apr 2024

Stranger Danger: Your Java Attack Surface Just Got Bigger thumbnail

Stranger Danger: Your Java Attack Surface Just Got Bigger

Vandana Verma Sehgal

LIVE · Jan 2022

WeAreDevelopers LIVE - Node and Package Security thumbnail

Node and Package Security

Chris Heilmann +2

LIVE · Aug 2026

Supply Chain Security and the Real World: Lessons From Incidents thumbnail

Supply Chain Security and the Real World: Lessons From Incidents

Adrian Mouat · Chainguard

World Congress · 2025

Walking into the era of Supply Chain Risks thumbnail

Walking into the era of Supply Chain Risks

Vandana Verma

LIVE · Apr 2022

Related articles

BB

Benedikt Bischof

Walking Into The Era of Supply Chain Risks

Welcome to this issue of the WeAreDevelopers Live Talk series. This article recaps an interesting talk by Vandana Verma who introduced the audience interesting topic of supply chain risks.About the...

over 4 years ago

Walking Into The Era of Supply Chain Risks

CH

Chris Heilmann

Dev Digest 138 - Are you secure about this?

Hello there! This is the 2nd "out of the can" edition of 3 as I am on vacation in Greece eating lovely things on the beach. So, fewer news, but lots of great resources. Many around the topic of sec...

about 2 years ago

Dev Digest 138 - Are you secure about this?

DC

Daniel Cranney

Dev Digest 188: CfP time, the risks of NPM and IKEA algorithms

Inside last week’s Dev Digest 188 . 🤖 GitHub Copilot CLI is now in public review 💻 Microsoft is bringing ‘vibe working’ to office apps 🎣 Attackers abuse AI tools to generate captchas in fishing at...

about 1 year ago

IKEA-style no-text diagrams explaining algorithms

DC

Daniel Cranney

Do You Trust Your Agents? Five Quick Ways to Contain Them

Do you trust your agents? Most of us use coding agents every day now. Give one a vague request, walk away, and come back to a pile of mostly working software. It’s brilliant, right up until you rem...

16 days ago

An image of a cube-shaped container with a ball of light inside of it

From learning to earning

Jobs that call for the skills explored in this talk.

Product Security Incident Response Analyst

Expert $329k Remote Github Code Review Data Analysis

Staff Developer Advocate, GitHub Security Lab

San Francisco, CA, United States

Experienced $323k Git Github Databases

Senior Software Engineer, Vulnerability Management

Expert $329k Remote Ruby Golang Docker

about 1 month ago

Cyber Defense & Incident Response

Delivery Hero SE

Zaragoza, Spain

Remote Golang Cybercrime Security Log

about 1 month ago

Cyber Defense & Incident Response

Delivery Hero SE

Remote Golang Cybercrime Security Log

about 2 months ago

Cyber Defense & Incident Response

Delivery Hero SE

Remote Golang Cybercrime Security Log