Navigating the Node.js Supply Chain Minefield
June 26, 2025
13:15
Hall B
Hebrew | Intermediate | Authentication and Security

How much do you really trust your dependencies?
In this 15-minute talk, we’ll take a close look at the risks hidden in the Node.js supply chain.
Through a live, simplified attack, we’ll see just how easy it is for a single npm install to introduce malicious code into your app. More importantly, we’ll cover practical ways to protect yourself - lockfiles, audits, and modern security tools.
Stay ahead of the threats and keep your code safe.

Melanie Shoresh
LinkedIn_SM_icon_RN22
Melanie Shoresh
Sofware Engineer

Melanie Shoresh is a software engineer with six years of experience. Passionate about security and vulnerabilities, she love to explore the challenges and potential solutions in AI security. She is an active group leader and lecturer at Techgym.

Cancellation Policy

Sponsor Cancellation:

In case of cancellation of the event, we will offer a full refund to all attendees and sponsors.

Attendee cancellations:

Up to 30 days prior to the event – 100% Refund.
30-14 days prior to the event – 50% Refund.
No refund will be offered later than that.