Analysis of an Exploited NPM Package || Jarrod Overson

Channel:
United States Coding Tech
Subscribers:
725,000
Published on ● Video Link: https://www.youtube.com/watch?v=2cyib2MgvdM


Duration: 24:25
42,784 views
1,580

Node’s npm carries over 210,000 packages from over 60,000 contributors. This wealth of open source functionality is awesome, but it also carries risk. You’re running a stranger’s code inside your applications. Do you know which packages you’re running? Do you know if their authors understand or care about security? Do you know if they have vulnerabilities?

EVENT:

JS Nation 2019

SPEAKER:

Jarrod Overson

PUBLICATION PERMISSIONS

JS Nations Organizer provided Coding Tech with the permission to republish this video.

JS Nations web-site: https://jsnation.com/

CREDITS:

JS Nations YouTube channel: https://www.youtube.com/channel/UCQM428Hwrvxla8DCgjGONSQ

Original video source: https://www.youtube.com/watch?v=-rs-5ZL-f9w



Other Videos By Coding Tech


2019-06-23Beyond JavaScript: The Languages for the Modern Web
2019-06-23State of CSS Houdini
2019-06-23Practical Go: Real World Advice For Writing Maintainable Go Programs
2019-06-22Anvil: Full-stack Web Apps with Nothing but Python
2019-06-22React + TypeScript: Why and How
2019-06-22The C++20 Standard Library: Beyond Ranges
2019-06-21JavaScript On Microcontrollers
2019-06-20Machine Learning: Zero to Hero
2019-06-19Shaping the Future of Java, Faster
2019-06-19Advanced TypeScript Tooling at Scale
2019-06-18Analysis of an Exploited NPM Package || Jarrod Overson
2019-06-17From Policing to Programming: How I Changed Career When I Turned 40
2019-06-17The Year in Post-quantum Crypto
2019-06-16Understanding CSS Custom Properties
2019-06-15UX / UI Inspiration for 2019
2019-06-15Improving the Quality of Incoming Code
2019-06-15Building UIs in the Dark (aka Elm Programming)
2019-06-15The State of Images (The State of the Web)
2019-06-14Machine Learning Infrastructure || Alexandra Johnson
2019-06-14Constant Time
2019-06-14Taming Reactive NodeJS: Stream-oriented Architecture with Nest


Tags:
npm
web security
hacking
hacker attacks