LASCON

Join the Semgrep team at LASCON, October 29–30 at Norris Conference Centers in Austin, TX!

We're excited to sponsor the official LASCON Happy Hour on Thursday, October 29, from 5:00–8:00 PM! Stop by, grab a drink, and connect with fellow security professionals.

As a thank you for joining us, we're giving away a Cyberdeck uConsole Kit for Raspberry Pi CM4, featuring the ClockworkPi v3.14 Rev.5 Mainboard!

Enter your details for a chance to win! The lucky winner will be announced during the closing ceremony on Friday, October 30.

And don't miss Semgrep's very own Dr. Katie Paxton-Fear as she takes the stage:

Friday, October 30 | 1:00–1:50 PM CT
Magnolia

🎤 Much TODO about npm: Worms, Malware and Lifecycle Scripts

Supply chain attacks targeting npm have a common thread: attackers exploiting preinstall and postinstall hooks to execute malicious code. While these hooks are an intentional feature of npm, they're used by only a small fraction of legitimate packages, raising questions about whether they should be enabled by default.

Join Dr. Katie Paxton-Fear as she explores how attackers are abusing npm lifecycle scripts, why threats are evolving beyond traditional hooks, and what developers and security teams can do to better protect the software supply chain.