npm Courses and Certifications

Packt

Mastering Yarn: The Complete Guide (Beginner to Advanced)

Move from Yarn fundamentals to Plug’n’Play and workspaces by building and testing a modular monorepo task manager CLI, then publish packages to NPM.

• Coursera
• 5 weeks, 1 hour a week
• Self-Paced
• Paid Course

Introduction to Monorepos with NPM Workspaces

Keep interlinked projects in one repository: configure NPM workspaces, add Next.js and Vite apps, share a TSUP-built TypeScript library, and run scripts across all packages.

• egghead.io
• 24 minutes
• Self-Paced
• Paid Course

Streamlining Open-Source License Compliance With the Continuous Clearing Tool

Discover how to automate open-source license compliance using the Continuous Clearing Tool, streamlining identification and clearing of OSS components across multiple package managers.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

John Hammond

NPM Malware Now Has Multiple Targets - ExoTickler Malware Analysis

Discover how ExoTickler malware evolved to target multiple platforms beyond gaming mods, analyzing its new attack vectors and detection methods.

• YouTube
• 55 minutes
• Self-Paced
• Free Video

JavaScript Conferences by GitNation

Levelling Up Monorepos with npm Workspaces

Explore npm workspaces for efficient monorepo management. Learn new npm CLI features to streamline your development workflow and enhance project organization.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

JavaScript Conferences by GitNation

Analysis of an Exploited NPM Package

Dive into the anatomy of a real-world npm package exploit, exploring its payloads, obfuscation techniques, and ultimate goals to enhance your understanding of JavaScript security.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Snyk

How Malicious NPM Packages Make Your Apps Vulnerable - SnykLIVE Recording

See how malicious npm packages exploit lifecycle scripts and compiled TypeScript to modify applications, and learn recommendations and tools to prevent these attacks.

• YouTube
• 1 hour 15 minutes
• Self-Paced
• Free Video

Builds Today, Breaks Tomorrow: The Mystery of the Disappearing NPM Dependency

Unraveling the mystery of a vanishing NPM dependency, exploring its impact on build pipelines, and providing best practices for developers and maintainers to ensure stability and compliance.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

DefCamp

Supply Chain Shenanigans - Evil npm and Shady NuGet

Explore npm and NuGet supply chain vulnerabilities, uncovering potential threats and security risks in package management ecosystems for software developers and cybersecurity professionals.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Ian Wootten

Python's Package Installer vs Node.js - Lessons from npm

Explore Python's package management challenges, comparing pip with npm, and discover the benefits of virtual environments for improved dependency handling.

• YouTube
• 11 minutes
• Self-Paced
• Free Video

DevSecCon

Supply Chain Attacks - Focusing on NPM Vulnerabilities and Defenses

Explore NPM ecosystem vulnerabilities, learn to identify and protect against supply chain attacks, and discover strategies to fortify open-source software security.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Conf42

Supply Chain Attacks: Focusing on NPM Vulnerabilities - DevSecOps 2023

Explore supply chain attacks focusing on NPM, learn defensive strategies, and discover research findings on vulnerabilities in package ecosystems. Gain insights into detection tools and solutions.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Black Hat

NPM and Sigstore - Provenance Comes to the World's Largest OSS Ecosystem

Explore GitHub's efforts to secure the Javascript ecosystem through provenance integration and Sigstore partnership, enhancing npm's security against malware and supply chain attacks.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Tejas Kumar

Teaching Git, GitHub, Node.js, and NPM to a Non-Developer and Opening His First Ever Pull Request

A non-developer learns Git, npm, and Node.js by modifying a website and opening, reviewing, and merging a first GitHub pull request.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

DevConf

Think Like an Attacker - Why Your npm install Is a Hacker's Dream

Uncover how attackers exploit npm packages to steal credentials and compromise systems, plus learn practical defense strategies to protect your projects from supply chain attacks.

• YouTube
• 29 minutes
• Self-Paced
• Free Video