Developers Are Now Targets: How Supply Chain Attacks Actually Reach You
transcript
show notes
Developers are no longer just building software.
They’re being targeted directly.
In this episode, Tanya Janca explains how supply chain attacks reach developers through everyday tools, packages, and workflows.
These attacks don’t feel like attacks at first. They look like normal development work until it’s too late.
You’ll learn:
• How supply chain attacks reach individual developers
• Why developer environments are now high-value targets
• Where risk shows up in daily workflows
• Simple ways to protect yourself without slowing down
If you work in JavaScript, DevSecOps, or application security, this shift matters.
👉 Start by reviewing what you install, what runs during install, and what your tools are actually doing behind the scenes.
#SupplyChainSecurity #DevSecOps #AppSec #SecureCoding #SoftwareSecurity #DeveloperSecurity
DevSec Station is a podcast by Tanya Janca (SheHacksPurple), focused on short, practical lessons that help software developers build more secure software.
Train with Tanya: Want to bring practical, hands-on secure coding, application security, or AI security training to your team? Learn more at SheHacksPurple.
Follow Tanya:
