Slaying the Dragons - A Security Professional's Guide to Malicious Packages
Security BSides San Francisco via YouTube
Google, IBM & Microsoft Certificates — All in One Plan
MIT Sloan: Lead AI Adoption Across Your Organization — Not Just Pilot It
Overview
Google, IBM & Meta Certificates — All 10,000+ Courses at 40% Off
One annual plan covers every course and certificate on Coursera. 40% off for a limited time.
Get Full Access
Explore how attackers exploit software supply chains through typosquatting, author impersonation, and sophisticated malware campaigns in this 44-minute conference talk from BSidesSF 2025. Discover the tactics cybercriminals use to infiltrate package repositories and compromise software distribution channels. Learn practical threat hunting methodologies specifically designed to identify malicious packages before they can cause damage to your organization. Master step-by-step detection techniques for analyzing suspicious packages and understanding their potential impact. Develop comprehensive defense strategies to protect your software supply chain from these evolving threats. Gain actionable insights into building robust security controls that can effectively identify and mitigate package-based attacks across different programming ecosystems.
Syllabus
BSidesSF 2025 - Slaying the Dragons: A Security Professional’s Guide to...(Kirill Boychenko)
Taught by
Security BSides San Francisco