Uploaded May 2026 | Updated September 2026, 2 weeks ago
🔐 Your npm install can steal your secrets — and your AI assistant might help it do that 😓 In this talk, Jo Franchetti breaks down real supply chain attacks and shows how to run untrusted code (including AI-generated) in complete isolation — no Docker required 🔥
What's inside:
🔹 How the Shai-Hulud worm turned 1,300+ npm packages into attack vectors automatically
🔹 The Chalk attack: a phishing email → 2 billion weekly downloads compromised
🔹 Why --ignore-scripts doesn't save you at runtime
🔹 Deno's permission system stopping credential theft live on stage
🔹 Why AI-generated code is structurally less reviewed — and why that matters
🔹 12,000 live API keys in AI training data + a real GitHub Copilot CVE
🔹 MicroVM sandboxes that start in 200ms — no Docker needed
🔹 How to pass API keys to untrusted code without the code ever seeing them
🔥 Jo Franchetti is a Software Engineer and Developer Advocate passionate about developer experience, TypeScript, and teaching good use of the web. Beyond the code, Jo mentors junior developers, actively advocates for mental health awareness in tech, and works to make the industry more diverse and inclusive.
👉 Connect with Jo:
🔗 https://x.com/thisisjofrank
🔗 github.com/thisisjofrank
Click the Related video to watch the full talk on YouTube!
#nodejs #javascript #npm #denosecurity #supplychainattack #cybersecurity #webdev #typescript #deno #npmpackages #softwaresecurity #devops #aicoding #promptinjection #sandboxing #microvm #appsecurity #dependencysecurity #javascriptdeveloper #securecoding #aitools #githubcopilot #llmsecurity #nodecongress #backenddevelopment #softwareengineering #devsecops #malware #opensouce #codesecurity
🔐 Your npm install can steal your secrets — and your AI assistant might help it do that 😓 In this talk, Jo Franchetti breaks down real supply chain attacks and shows how to run untrusted code (including AI-generated) in complete isolation — no Docker required 🔥
What's inside:
🔹 How the Shai-Hulud worm turned 1,300+ npm packages into attack vectors automatically
🔹 The Chalk attack: a phishing email → 2 billion weekly downloads compromised
🔹 Why --ignore-scripts doesn't save you at runtime
🔹 Deno's permission system stopping credential theft live on stage
🔹 Why AI-generated code is structurally less reviewed — and why that matters
🔹 12,000 live API keys in AI training data + a real GitHub Copilot CVE
🔹 MicroVM sandboxes that start in 200ms — no Docker needed
🔹 How to pass API keys to untrusted code without the code ever seeing them
🔥 Jo Franchetti is a Software Engineer and Developer Advocate passionate about developer experience, TypeScript, and teaching good use of the web. Beyond the code, Jo mentors junior developers, actively advocates for mental health awareness in tech, and works to make the industry more diverse and inclusive.
👉 Connect with Jo:
🔗 https://x.com/thisisjofrank
🔗 github.com/thisisjofrank
Click the Related video to watch the full talk on YouTube!
#nodejs #javascript #npm #denosecurity #supplychainattack #cybersecurity #webdev #typescript #deno #npmpackages #softwaresecurity #devops #aicoding #promptinjection #sandboxing #microvm #appsecurity #dependencysecurity #javascriptdeveloper #securecoding #aitools #githubcopilot #llmsecurity #nodecongress #backenddevelopment #softwareengineering #devsecops #malware #opensouce #codesecurity
