Protecting my Node.js project of dependency confusion attacks
Having a private registry as part of a stack is getting a popular trend due to the benefits that it brings to your organization. But a misconfigured registry can open the door to malicious individuals. This talk is about how to secure a Node.js project from dependency confusions and other possible attacks using a Verdaccio registry as proof of concept.
Juan Picado
Senior Front-End Engineer at eBay Classifieds Group based in Berlin, building front-ends for classifieds like Kijiji Autos in Canada. He is a passionate JavaScript engineer, contributes to open source almost every day and is the lead maintainer of Verdaccio (mostly in his spare time). His goal is to help the Node.js ecosystem to keep a free and open private registry accessible for all developers.
Watch video Protecting my Node.js project of dependency confusion attacks online without registration, duration hours minute second in high quality. This video was added by user DevSecCon 22 April 2021, don't forget to share it with your friends and acquaintances, it has been viewed on our site 1,473 once and liked it 18 people.