TuxCare Is Heading to JAX Hybrid 2026!

TuxCare is heading to JAX Hybrid 2026 at Rheingoldhalle Mainz, Germany, May 5–7. JAX is one of Europe’s most respected conferences for Java, software architecture, and engineering craft — and this year, our team is coming with a lot to say about the security risks hiding in plain sight inside modern JavaScript and open source supply chains. If your organization ships software that depends on third-party packages (and whose doesn’t?), these are conversations worth having.

Our team will be onsite across all three days to connect with developers, architects, and engineering leads on the real-world challenges of open source security — from dependency risk to supply chain hygiene to keeping software environments secure as ecosystems age.

Speaking Sessions

Possessed by Packages: Is Your JavaScript Haunted?

Tuesday, May 5 · 10:30–11:30 · Chris DeMars

Unexpected network calls. Strange behavior you can’t trace to your own code. It might not be a bug — it might be a compromised dependency. This session explores how malicious packages infiltrate codebases through the open source supply chain, and what developers can do to detect and prevent the intrusion before it becomes an incident.

The Men in Black Know What’s in Your JavaScript and How to Fix It!

Wednesday, May 6 · 10:15–11:15 · Chris DeMars

In an era of escalating supply chain attacks, knowing exactly what’s shipping inside your node_modules isn’t optional anymore. This session gets practical: how to surface what’s actually lurking in your JavaScript dependencies, and how to get ahead of the risk before unidentified packages become unmanaged vulnerabilities.

Both talks are sharp, technically grounded, and written for engineers who’d rather solve problems than sit through slides. Well worth adding to your schedule.

If you’re attending JAX, come find our team on the floor — we’re always up for a direct conversation about what open source security looks like at the application layer.

See you in Mainz!