BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: Vibe Check: How Adversaries Exploit Developer Trust 
 from\n   Malicious Repos to AI Agents\n   Tags: Adversary Village | Creato
 r Workshop\n   When: Saturday\, Aug 8\, 11:00 - 12:55 PDT\n   Where: LVCCW
  Level 1 Hall 2 602 (Adversary Village) Workshop Stage -\n   [1]Map\n\n   
 Description:\n\n   "Do you trust the authors of the files in this folder?"
  It's a prompt\n   modern IDEs throw at developers\, and most click past i
 t by reflex. In\n   2026\, adversaries turned that reflex into an initial-
 access vector -\n   North Korean operators (Void Dokkaebi / Famous Chollim
 a) now lure\n   developers into cloning malicious repos that execute the m
 oment a\n   folder opens\, with 750+ infected repositories catalogued so f
 ar.\n\n   This hands-on workshop has attendees emulate attacks across the 
 three\n   boundaries developers trust by default: the IDE\, the AI coding 
 agent\,\n   and the package manager. Participants build and run the artifa
 cts\n   themselves: a take-home-assessment repo that fires malicious paylo
 ads\n   in IDEs\, a "Claude Code"-style agent harness hardened and then\n 
   bypassed one layer at a time to achieve code execution\, and a\n   troja
 nized npm package that runs before any code imports it. Each is\n   drawn 
 from real 2026 attacks & vulnerabilities: DPRK interview lures\,\n   agent
 -harness CVEs\, and the recent Shai-Hulud npm worm.\n\n   SpeakerBio:  Mic
 hael Chan\, Senior Offensive Security Consultant at\n   KPMG Canada\n\n   
 Michael is a social scientist turned hacker. He started by studying\n   hu
 man behaviour and trust at Oxford - now he brings that lens into\n   offen
 sive security\, validating and breaking the assumptions built into\n   app
 lications\, systems\, and organizations. As a Senior Offensive\n   Securit
 y Consultant at KPMG Canada\, Michael works across application\n   securit
 y\, threat modelling\, and adversary simulation. Outside of work\,\n   he 
 spends most of his time learning\, building\, breaking fun new tech\n   (y
 es AI included)\, and engaging with local cyber communities.\n\n   Links:\
 n       adversaryvillage.org/adversary-events/DEFCON-34/Michael-Chan/ -\n 
   [2]https://adversaryvillage.org/adversary-events/DEFCON-34/Michael-Chan/
 \n   '\n\n   1. #LVCCW_Level1_Hall2\n   2. https://adversaryvillage.org/ad
 versary-events/DEFCON-34/Michael-Chan/\n\n\n
DTEND:20260808T195500Z
DTSTART:20260808T180000Z
LOCATION:Adversary Village - LVCCW Level 1 Hall 2 602 (Adversary Village) W
 orkshop Stage
SUMMARY:Vibe Check: How Adversaries Exploit Developer Trust from Malicious 
 Repos to AI Agents
END:VEVENT
END:VCALENDAR