The main focus of the talk by Firas is on the dark side of open source, specifically discussing examples of malicious code and threats in the NPM and JavaScript ecosystems.