TuxCare is heading to WeAreDevelopers World Congress North America 2026! September 18, 2026 TuxCare will be at WeAreDevelopers World Congress North America, one of the world's largest developer conferences, bringing together 10,000+ builders and 500+ speakers in San Jose, California. TuxCare Inc.'ll be on the expo floor September 24-25 at Booth #631, talking about the vulnerabilities hiding in the software supply chain, from typosquatted packages to malicious install scripts that execute before your build even runs. Its team will be onsite across both days to connect with developers, engineering leaders, and platform teams, and share how TuxCare's SecureChain for Open Source helps catch risky and malicious packages before they make it into production. Catch its talk. Silent execution: defending against install-time supply chain attacks. Chris DeMars, TuxCare Friday, September 25 · 4:15-4:25 PM · Outdoor Stage Most teams focus on securing runtime code, but the bigger risk might fire off before you even hit build. In this fast-paced session, Chris breaks down how malicious npm lifecycle scripts, like the ones behind the early 2026 Glassworm attacks, can exfiltrate credentials during a routine install, why standard audit tools often miss them, and what it takes to harden your local environment and CI/CD pipeline against them. Come find TuxCare Inc. at Booth #631 on the expo floor. Whether you want to catch the talk, dig into install-time security, or just say hi. See you in San Jose!

TuxCare's Senior Developer Advocate to speak at the 2026 Kansas City Developer Conference. PALO ALTO, CA, UNITED STATES, September 9, 2026 / EINPresswire.com / - TuxCare, a global innovator in securing open source, today announced that Chris DeMars, Senior Developer Advocate, is scheduled to speak at the Kansas City Developer Conference (KCDC), a community-driven technology conference taking place September 9-11 at the Kansas City Convention Center in Kansas City, Missouri. On Thursday, September 10 at 11:15 a.m., DeMars is set to deliver a talk titled "The Men in Black Know What's in Your JavaScript and How to Fix it!" The session surrounds what's lurking in the dark corners of node_modules, such as unidentified flying dependencies sneaking aboard a project. DeMars will explore the growing importance of Software Bills of Materials (SBOMs) as software supply chain threats continue to rise, and why frontend developers should prioritize visibility into the dependencies powering their applications. He will demonstrate how to generate SBOMs using tools such as CycloneDX and Syft and integrate SBOM creation into modern build workflows. Attendees will gain practical guidance for inventorying project dependencies, identifying known vulnerabilities and strengthening the security of the software they ship. On the same day at 3:45 p.m., DeMars will also present "Possessed by Packages: Is Your JavaScript Haunted?" The session encourages attendees to ask if their app is behaving strangely, if random network calls exist, and if there's some unexpected behavior. During his talk, DeMars will explore how malicious packages sneak into a codebase like ghosts through an open portal. Attendees will learn how typo-squatting, dependency confusion, and supply chain attacks haunt the JavaScript ecosystem, and how to perform a proper exorcism - going beyond an npm audit and using tools and habits to stop the haunt before it begins. DeMars serves as TuxCare's Senior Developer Advocate where he focuses on secure JavaScript development and software supply chain education. With more than 20 years of experience in web development and developer relations, DeMars is a recognized Progress Champion and former Google Developer Expert and Microsoft MVP - best known for his work in web accessibility, secure frontend practices, and community building. Based in Detroit, he brings both technical expertise and a passion for inclusive, developer-first communities to every stage he steps on. For detailed information on the Kansas City Developer Conference 2026, visit: About TuxCare TuxCare is on a mission to reduce the risk of cyber exploitation while making it easier for enterprises to get the most from their open-source technologies. Through its automated rebootless vulnerability patching solutions, end-of-life security offerings, and enterprise-grade support for AlmaLinux, TuxCare empowers thousands of organizations to protect themselves while leveraging the most advanced enterprise security solutions on the market today. The world's largest enterprises, government agencies, service providers, universities, and research institutions are protected by TuxCare on over one million workloads and growing. For more information, go to https://tuxcare.com. DeShea Witcher TuxCare [email protected] Legal Disclaimer: EIN Presswire provides this news content "as is" without warranty of any kind. We do not accept any responsibility or liability for the accuracy, content, images, videos, licenses, completeness, legality, or reliability of the information contained in this article. If you have any complaints or copyright issues related to this article, kindly contact the author above.

TuxCare has joined JFrog's Self-Healing Software Supply Chain Security Ecosystem as a founding partner. The collaboration integrates TuxCare's SecureChain technology with JFrog Zero-Touch Remediation, enabling organisations to automatically identify, apply and verify secure fixes for vulnerable open-source software. SecureChain provides continuously maintained open-source packages that are rebuilt from source, screened for malware and patched for known vulnerabilities. The service extends protection through Endless Lifecycle Support when upstream maintenance ceases. The integration allows organisations to automatically match TuxCare-provided fixes to vulnerable components within a policy-driven workflow, reducing the time between vulnerability discovery and remediation. TuxCare currently protects over one million workloads across enterprises, government agencies and research institutions globally.