The JavaScript ecosystem has grown rapidly over the years, with **NPM (Node Package Manager)** at the core of dependency management. However, with great convenience comes great risk. Supply chain attacks — malicious modifications to software packages or dependencies — have emerged as a serious threat in the Node.js community. In this article, we’ll explore what supply chain attacks are, real-world examples, and strategies to protect your projects.
DelgadoElias
Software Developer & Project Manager
Full Stack Developer with experience leading teams and managing servers. Specialized in full stack architecture and best practices. Studying cybersecurity and DevOps.
Writing
View all postsIn modern web development, frameworks like **Next.js**, **Nuxt**, and **SvelteKit** offer different ways to deliver content. Beyond technology, understanding **how content is delivered** helps make decisions that affect both user experience and application architecture.
JavaScript is single-threaded by design, which means it can only execute one task at a time in the main thread. This can lead to performance issues when running CPU-intensive operations. **Workers** provide a way to run code in the background without blocking the main thread.
Experience
View full résumé
Since June 2025, I lead the technological strategy of Helipagos, driving cloud cost optimization, backend rearchitecture, DevOps automation, and product scalability. I closed a strategic agreement with Huawei Cloud, reducing infrastructure costs by 30%, while leading a migration that decreased backend microservices memory consumption by 60%. I oversee teams in design, product ownership, and development, aligning technology with business goals and market positioning.

I analyze and optimize products, driving innovation and improving system performance. I developed the preliminary Kotlin version of a Helipagos product and built a TOTOP microservice using Kotlin, Spring Boot, and GraalVM. I redesigned our flagship fintech product, reducing 3 days of development to just 30 minutes of configuration. I manage CI/CD pipelines, configure AWS EC2 instances, and implement integration scripts across the organization. Additionally, I develop core functionalities in AWS Lambda and design architectures aligned with business needs.
Projects
View all projectsAn AI-powered image editing tool that allows users to edit photos using natural language commands. Built with React, Python, and integrated with various AI models for intelligent image manipulation.
A challenge to make a website with HTML, CSS & Javascript and deploy them in less than 3 hours.
A simple BMI Calculator built with Next.js 13, TypeScript, and MongoDB. Features like reactive BMI calculation, and a responsive design.