Topics

• Mini Shai Hulud is no longer just an npm problem
  By: eevelweezel
  Experience Level: Novice
  Length: 20 Minutes
  Description:

  Mini Shai Hulud is self-propagating malware that steals credentials from developer machines and CI/CD pipelines.  It was first reported infecting npm packages in 2025, but as of May 2026, it has spread to PyPI.  This talk will cover how Shai Hulud works and some of the mitigation strategies discussed at PyCon. 

• You're Not Being Replaced You're Being Multiplied.
  By: Joshua Herman
  Experience Level: Intermediate
  Length: 40 Minutes
  Description:

  Everyone has this deep rooted existential fear that AI are taking software developers / engineers jobs. Not only that epistologically when we write code with AI or when working with others they may introduce deficiencies, regressions and problems with readability of committed code.  

  We will address these fears and problems with going through techniques on writing a AGENTS.md file and other similar files like CLAUDE.md . These are guides for agents that work with your code and it introduces rules on how your code should be treated when you are working on them and you can even commit these files to any code repo and other people who use things like codex and claude code can read them. These can be used to perform tests before regressions exist and undo them, look for bugs and security holes and even enforce style rules in your code and applications. Last we will go over ways to generate diagrams
  
  https://agents.md