Skip to content

DEV Community

npm

Node Package Manager

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Apr 3

I built an npm malware scanner in Rust because npm audit isn't enough

#npm #security #rust #opensource

3 min read

Apr 4

MCP Connector Poisoning: How Compromised npm Packages Hijack Your AI Agent

#security #npm #javascript #devops

5 min read

k-s-h-r

Apr 4

I built Material Symbols SVG, an icon library for using Material Symbols as SVG components

#react #npm #typescript #frontend

5 min read

Apr 4

npm Provenance and SLSA: The Supply Chain Hygiene Baseline Every Team Needs in 2026

#security #npm #devops #javascript

5 min read

DHg

Apr 4

Axios got compromised. They attacked the human, not code.

#npm #security #axios #opensource

4 min read

Apr 4

Why Your AI Coding Agent Keeps Recommending Dead Packages

#agents #ai #npm #programming

2 min read

Artyom Kornilov

Apr 4

Malicious npm Packages Disguised as Strapi Plugins Enable Data Exfiltration and Remote Code Execution

#npm #strapi #malware #exfiltration

7 min read

0xkoji

Apr 3

Supply Chain Security measures

#security #npm #uv #githubactions

1 min read

Apr 3

I'm 12 and I built a 2KB 0 dependency alternative to CASL!

#showdev #npm #typescript #node

1 min read

Apr 4

The Axios/npm Incident & Why AI Won’t Replace Devs

#ai #javascript #npm #security

1 min read

Apr 3

I built an npm malware scanner and found 21 malicious packages in 24 hours

#security #npm #javascript #opensource

1 min read

bigjenkie

Apr 3

How the axios@1.14.1 supply chain attack worked (and how to protect yourself)

#javascript #opensource #security #npm

4 min read

Michael Kayode Onyekwere

Apr 3

What the Axios npm Compromise Means for MCP Server Maintainers

#security #mcp #npm #supplychain

4 min read

Apr 2

How to Finally (and Iteratively) Kill Every Last 'npm audit'

#security #automation #npm #node

3 min read

Apr 2

The Axios Incident Was an Execution Failure. Here Is the Architecture That Prevents It.

#npm #axios #openclaw #devsec

2 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.