DEV Community

Ofri Peretz profile picture

Ofri Peretz

IC5/M2 Leader @ Snappy US. Building revenue APIs & AI-ready ESLint plugins. Expert in distributed teams, scalable infra, and fostering a culture of craftsmanship.

Education

CS

Work

US Engineering Manager, Snappy

COPY FROM Exploits: When PostgreSQL Reads Your Filesystem

COPY FROM Exploits: When PostgreSQL Reads Your Filesystem

Comments
4 min read

Want to connect with Ofri Peretz?

Create an account to connect with Ofri Peretz. You can also sign in below to proceed if you already have an account.

Already have an account? Sign in
The N+1 Insert Loop That Slowed Our API to a Crawl

The N+1 Insert Loop That Slowed Our API to a Crawl

1
Comments 3
2 min read
search_path Hijacking: The PostgreSQL Attack You've Never Heard Of

search_path Hijacking: The PostgreSQL Attack You've Never Heard Of

Comments
2 min read
Getting Started with eslint-plugin-express-security

Getting Started with eslint-plugin-express-security

Comments
3 min read
Getting Started with eslint-plugin-nestjs-security

Getting Started with eslint-plugin-nestjs-security

Comments
2 min read
Getting Started with eslint-plugin-lambda-security

Getting Started with eslint-plugin-lambda-security

Comments
3 min read
Getting Started with eslint-plugin-browser-security

Getting Started with eslint-plugin-browser-security

Comments
2 min read
Getting Started with eslint-plugin-jwt

Getting Started with eslint-plugin-jwt

Comments
3 min read
Getting Started with eslint-plugin-crypto

Getting Started with eslint-plugin-crypto

Comments
2 min read
Getting Started with eslint-plugin-import-next

Getting Started with eslint-plugin-import-next

Comments
2 min read
Getting Started with eslint-plugin-vercel-ai-security

Getting Started with eslint-plugin-vercel-ai-security

Comments
2 min read
Transaction Race Conditions: Why BEGIN on Pool Breaks Everything

Transaction Race Conditions: Why BEGIN on Pool Breaks Everything

Comments
2 min read
The Connection Leak That Took Down Our Production Database

The Connection Leak That Took Down Our Production Database

Comments
2 min read
Getting Started with eslint-plugin-secure-coding

Getting Started with eslint-plugin-secure-coding

Comments
3 min read
Getting Started with eslint-plugin-pg

Getting Started with eslint-plugin-pg

Comments
2 min read
Mapping Your Codebase to OWASP Top 10 with 247 ESLint Rules

Mapping Your Codebase to OWASP Top 10 with 247 ESLint Rules

Comments
5 min read
The Security Engineer Interview Cheat Sheet for JavaScript Developers

The Security Engineer Interview Cheat Sheet for JavaScript Developers

Comments
3 min read
The JWT Algorithm "none" Attack: The Vulnerability in 1 Line of Code

The JWT Algorithm "none" Attack: The Vulnerability in 1 Line of Code

1
Comments
2 min read
3 Lines of Code to Hack Your Vercel AI App (And 1 Line to Fix It)

3 Lines of Code to Hack Your Vercel AI App (And 1 Line to Fix It)

Comments
2 min read
SQL Injection in node-postgres: The Pattern Everyone Gets Wrong

SQL Injection in node-postgres: The Pattern Everyone Gets Wrong

Comments
2 min read
Hardcoded Secrets: The #1 Vulnerability AI Agents Can Auto-Fix

Hardcoded Secrets: The #1 Vulnerability AI Agents Can Auto-Fix

Comments
2 min read
Why eslint-plugin-import Takes 45 Seconds (And How We Fixed It)

Why eslint-plugin-import Takes 45 Seconds (And How We Fixed It)

Comments
2 min read
Your ESLint Security Plugin is Missing 80% of Vulnerabilities (I Have Proof)

Your ESLint Security Plugin is Missing 80% of Vulnerabilities (I Have Proof)

Comments
5 min read
Securing AI Agents in the Vercel AI SDK

Securing AI Agents in the Vercel AI SDK

Comments
3 min read
100% OWASP LLM Top 10 Coverage for Vercel AI SDK

100% OWASP LLM Top 10 Coverage for Vercel AI SDK

Comments
3 min read
Your Vercel AI SDK App Has a Prompt Injection Vulnerability

Your Vercel AI SDK App Has a Prompt Injection Vulnerability

Comments
2 min read
loading...