Analysis of an Exploited NPM Package || Jarrod Overson

Node’s npm carries over 210,000 packages from over 60,000 contributors. This wealth of open source functionality is awesome, but it also carries risk. You’re running a stranger’s code inside your applications. Do you know which packages you’re running? Do you know if their authors understand or care about security? Do you know if they have vulnerabilities? EVENT: JS Nation 2019 SPEAKER: Jarrod Overson PUBLICATION PERMISSIONS JS Nations Organizer provided Coding Tech with the permission to republish this video. JS Nations web-site: https://jsnation.com/ CREDITS: JS Nations YouTube channel: https://www.youtube.com/channel/UCQM428Hwrvxla8DCgjGONSQ Original video source: https://www.youtube.com/watch?v=-rs-5ZL-f9w https://www.youtube.com/watch?v=2cyib2MgvdM