OWASP Virtual Chapter Meeting

Malicious Package Defense: tactics for reducing risk of malicious open-source supply chain components.
Malicious open-source packages are one of the most challenging considerations for modern AppSec teams. Unlike vulnerabilities that merely "might be" exploited, malicious packages can cause damage the moment a developer runs ’npm install’. Learn how malware enters the software supply chain, and what straightforward steps you can take to help your organization reduce harm, resist infection, and respond promptly to supply chain incidents.