npm install && pray
summary
Concrete incidents and defenses: Shai-Hulud: 1,300+ npm packages turned into vectors, The Chalk attack: 2 billion weekly downloads compromised via a phishing email, and the claim that --ignore-scripts doesn't save you at runtime. Deno's permission model stops credential theft live on stage, 12,000 live API keys appear in AI training data and GitHub Copilot has a CVE, microVM sandboxes start in ~200ms, and a secrets-proxy demo shows placeholders so untrusted code never sees real keys.
AI-written summary · about
chapters (23)
- 0:00Intro
- 1:02Your 20% Off 🤫
- 1:24Shai-Hulud: the self-replicating npm worm that nobody could stop
- 2:53The Chalk attack: 2 billion weekly downloads hijacked with one phishing email
- 4:04Why your CI won't save you: the 3 mechanics behind every supply chain attack
- 5:41Node gives every package your full permissions. Deno doesn't.
- 6:57Post-install scripts: the attack vector hiding in plain sight
- 8:28The gap between npm install and your next CI scan is where malware lives
- 9:18Live demo: running the worm payload against Deno
- 10:29AI wrote your code. Do you actually know what it does?
- 11:1712,000 live API keys found in AI training data
- 12:47Why this keeps happening: it's structural, not accidental
- 13:41GitHub Copilot got a CVE — and prompt injection just became your problem
- 14:33Model poisoning: 250 documents, 90% backdoor success rate
- 14:57The boring everyday risk: AI code that just deletes the wrong folder
- 15:53Docker vs Deno permissions: honest comparison
- 17:20Deno Sandbox: microVM isolation that starts in 200ms, no Docker needed
- 18:29V8 isolates vs microVMs: two layers explained in 90 seconds
- 19:46Live demo: generating and executing AI code in complete isolation
- 25:13The last unsolved problem: how to pass API keys to untrusted code
- 26:05Live demo: secrets proxy — the code sees a placeholder, never the real key
- 27:32What to actually do: 3 defenses that work right now
- 29:17Q&A: lock files, Kubernetes egress, and safely using AI in your workflow
related talks
29mThink Like an Attacker: Why Your npm install Is a Hacker's Dream
53mLessons From NPM's Dark Side: Preventing the Next Shai-Hulud
28mnpm Security: Key Threats & Real Cases | Anastasiya Egorova #JSConfAM25
39m"Malice in the Modules" - How NPM Became a Supply-Chain Battleground?
29mAll your packages are belong to us - Protecting your npm dependencies
25mWhen the supply chain hits a sour note
47mBlack Clouds and Silver Linings in Node.js Security
20mKeynote: Securing JavaScript