TuxCare’s Chris DeMars set to speak at KCDC 2026

TuxCare said Senior Developer Advocate Chris DeMars will speak at the Kansas City Developer Conference in Kansas City, Missouri, on Sept. 10, 2026, with two sessions focused on JavaScript security and software supply chain risk. The talks will center on SBOMs, dependency visibility and defending against malicious packages in modern frontend and Node.js projects.

Why it matters: - Software supply chain attacks continue to pressure developers to look beyond traditional vulnerability scans. - DeMars’ sessions will focus on practical defenses for JavaScript teams that rely on large dependency trees and fast-moving build pipelines. - The talks are aimed at helping attendees inventory dependencies, spot known risks and reduce the chance of shipping compromised code.

What happened: - TuxCare announced that Chris DeMars, Senior Developer Advocate, is scheduled to speak at the Kansas City Developer Conference 2026. - KCDC takes place Sept. 9-11 at the Kansas City Convention Center in Kansas City, Missouri. - DeMars is scheduled to speak Thursday, Sept. 10 at 11:15 a.m. and again at 3:45 p.m. - His first talk is titled “The Men in Black Know What's in Your JavaScript and How to Fix it!” - His second talk is titled “Possessed by Packages: Is Your JavaScript Haunted?”

The details: - The first session will focus on Software Bills of Materials, or SBOMs, as supply chain threats rise. - DeMars will cover why frontend developers need visibility into the dependencies behind their applications. - The talk will include how to generate SBOMs with tools such as CycloneDX and Syft. - DeMars will also explain how to add SBOM creation to modern build workflows. - Attendees are expected to leave with guidance on inventorying dependencies, identifying known vulnerabilities and improving software security. - The second session will examine malicious packages and suspicious application behavior, including random network calls and unexpected activity. - DeMars will discuss typo-squatting, dependency confusion and supply chain attacks in the JavaScript ecosystem. - The session will also cover how to go beyond an npm audit and use tools and habits that can help stop a threat before it starts. - More information on DeMars’ sessions is available here. - Details on KCDC 2026 are available here.

Between the lines: - TuxCare is using the conference to position itself around secure JavaScript development and broader software supply chain education. - DeMars’ background in web accessibility, secure frontend practices and developer relations gives the sessions a practical, developer-facing angle rather than a purely theoretical one. - His resume includes more than 20 years in web development and developer relations, plus recognition as a Progress Champion, former Google Developer Expert and Microsoft MVP. - Based in Detroit, DeMars is presented as a speaker who combines technical expertise with community-building experience.

What's next: - DeMars will deliver both sessions during KCDC on Sept. 10. - Conference attendees can use the talks to evaluate their own dependency management, SBOM processes and supply chain defenses. - TuxCare directs readers to its website for more information about its open-source security offerings at TuxCare.