Talks · Software supply chain · 2022
Weaponizing NPM Packages for Protest and Malware
Recorded at Cloud Native Computing Switzerland , May 2022
The topic
Malicious npm packages, typosquatting, lockfile injection and the state of open source security, told through real incidents.
Where it's been given, and where it's next
1 delivered.