DEV Community

npm

Node Package Manager

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
My AI told me to pip install a package that doesn't exist. Turns out someone already weaponized that.
xihegoddess profile

My AI told me to pip install a package that doesn't exist. Turns out someone already weaponized that.

#ai #npm #security #testing
Comments
2 min read
Le migliori librerie di notifiche per React Native nel 2026: quale scegliere?
marco_crupi profile

Le migliori librerie di notifiche per React Native nel 2026: quale scegliere?

#reactnative #react #opensource #npm
Comments
7 min read
Lazy SRE's guide to secure systems, part 1: the dependencies you didn't read
sachincool profile

Lazy SRE's guide to secure systems, part 1: the dependencies you didn't read

#security #lazysre #supplychain #npm
Comments
7 min read
Hardening Your npm CI in 5 Concrete Layers
shipwithaiio profile

Hardening Your npm CI in 5 Concrete Layers

#claudecode #ai #npm #githubactions
1
Comments
2 min read
axios npm Supply Chain Attack (March 31, 2026) — What Happened and How to Check Your Lock File Right Now
lazydev_oh profile

axios npm Supply Chain Attack (March 31, 2026) — What Happened and How to Check Your Lock File Right Now

#security #npm #javascript #webdev
1
Comments
6 min read
Why npm supply chain attacks keep happening and how to harden your installs
alanwest profile

Why npm supply chain attacks keep happening and how to harden your installs

#npm #security #javascript #devops
Comments
4 min read
All It Took Was npm install (Axios Attack)
audreyhal profile

All It Took Was npm install (Axios Attack)

#npm #webdev #cybersecurity #node
1
Comments
4 min read
Completing the Picture: Adding Memory Diagnostics to a CPU Profiler
iwtxokhtd83 profile

Completing the Picture: Adding Memory Diagnostics to a CPU Profiler

#npm #node #javascript
Comments
6 min read
Signals, Effects, and the Algebra Between Them
jasuperior profile
Ja

Signals, Effects, and the Algebra Between Them

#typescript #npm #datastructures #node
Comments
6 min read
I audited the top 50 npm packages. Almost none ship with supply-chain attestations!
thecryptodonkey profile

I audited the top 50 npm packages. Almost none ship with supply-chain attestations!

#webdev #javascript #security #npm
Comments
10 min read
No, the AI didn't compromise your npm packages. You did.
pranta profile

No, the AI didn't compromise your npm packages. You did.

#security #javascript #npm #ai
3
Comments 1
13 min read
gpushx: The All-in-One CLI That Made My GitHub + Deployment Workflow 10x Faster
vinnugollakoti profile

gpushx: The All-in-One CLI That Made My GitHub + Deployment Workflow 10x Faster

#npm #cli #terminal #github
6
Comments
2 min read
I just hardened my OSS release pipeline to 11 layers of security — here's the playbook
achiya-automation profile

I just hardened my OSS release pipeline to 11 layers of security — here's the playbook

#opensource #security #github #npm
Comments
7 min read
npm Scripts: Unlocking the Full Power of package.json
armorbreak profile

npm Scripts: Unlocking the Full Power of package.json

#javascript #node #npm #tooling
Comments
3 min read
Rust Binary Distribution via npm: Addressing Security Risks and Installation Failures with Native Caching Solutions
pavkode profile

Rust Binary Distribution via npm: Addressing Security Risks and Installation Failures with Native Caching Solutions

#rust #npm #security #distribution
Comments
12 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.