# Hacking your infra from the outside by exploiting npm Dependency Confusion attacks | Talk by Liran Tal

Software supply chain talk by Liran Tal, delivered once (2021). Recording available.

Canonical: https://lirantal.com/speaking/talks/hacking-your-infra-from-the-outside-by-exploiting-npm-dependency-confusion-attacks

[Talks](/speaking/talks) · [Software supply chain](/speaking/talks?topic=supply-chain) · 2021

# Hacking your infra from the outside by exploiting npm Dependency Confusion attacks

[Watch the recording](https://snyk.io/video/hacking-infra-from-outside-exploiting-npm-dependency-confusion-attacks/)

Recorded at [SnykCon 2021](/speaking/events/2021-10-07-snykcon-2021) , Oct 2021

## The topic

Malicious npm packages, typosquatting, lockfile injection and the state of open source security, told through real incidents.

## Where it's been given, and where it's next

1.  [Oct 2021

    ### SnykCon 2021

    Online

    Conference

    ](/speaking/events/2021-10-07-snykcon-2021)

1 delivered.

## From the stage

*    [![Photo from SnykCon 2021](https://raw.githubusercontent.com/lirantal/public-speaking/main/images/2021/2021-10-07-1.jpg) SnykCon 2021](https://raw.githubusercontent.com/lirantal/public-speaking/main/images/2021/2021-10-07-1.jpg)

## Book this talk

Delivered

Once

Given

2021

Formats

Conference

Languages

English

[Invite me to give this talk](https://www.linkedin.com/in/talliran) [or message me on X](https://x.com/liran_tal)

Booking 2027

## Tell me about your event.

Conference keynote, meetup talk, workshop or podcast: send me the audience, the format and the dates, and I'll tailor a session to fit.

[Invite me to speak](https://www.linkedin.com/in/talliran) [Message me on X](https://x.com/liran_tal) [Browse the talks](/speaking/talks)