DEV Community

npm

Node Package Manager

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
74 minutes before the advisory: graph triage for npm account hijacks

74 minutes before the advisory: graph triage for npm account hijacks

Comments
9 min read
The Tensorlake Worm Commits a .claude Folder So It Runs Again When You Open Claude Code

The Tensorlake Worm Commits a .claude Folder So It Runs Again When You Open Claude Code

Comments
10 min read
I Ran `npm fund` and Found 47 Packages Keeping My App Alive

I Ran `npm fund` and Found 47 Packages Keeping My App Alive

Comments
3 min read
Glitchpack

Glitchpack

1
Comments
1 min read
How to Validate Sri Lankan NIC Numbers, Phone Numbers, and LKR Amounts.

How to Validate Sri Lankan NIC Numbers, Phone Numbers, and LKR Amounts.

Comments
9 min read
I gave my coding agents a supply-chain tripwire (and a radar)

I gave my coding agents a supply-chain tripwire (and a radar)

Comments
3 min read
Typosquatting and Slopsquatting: Defending the Package Install Path

Typosquatting and Slopsquatting: Defending the Package Install Path

Comments
4 min read
New stricter rules from GitHub for code packages after security investigation

New stricter rules from GitHub for code packages after security investigation

Comments
2 min read
Your package.json Says What You Asked For. Only the Lockfile Says What You Got.

Your package.json Says What You Asked For. Only the Lockfile Says What You Got.

Comments
3 min read
Same hook, other side: how npm worms turned AI agent config into malware

Same hook, other side: how npm worms turned AI agent config into malware

Comments
12 min read
The Shai-Hulud Worm Now Steals Your AI Agent Credentials: A 20-Minute npm Audit

The Shai-Hulud Worm Now Steals Your AI Agent Credentials: A 20-Minute npm Audit

2
Comments
8 min read
How to set up a private npm registry: from install to .npmrc, scope, and publish

How to set up a private npm registry: from install to .npmrc, scope, and publish

1
Comments
6 min read
30,000 Machines Hacked by Fake Job Offers. Mine Was Almost Next.

30,000 Machines Hacked by Fake Job Offers. Mine Was Almost Next.

Comments 1
6 min read
Publish a public artifact portal: anonymous /explore install commands

Publish a public artifact portal: anonymous /explore install commands

2
Comments
4 min read
I counted the strangers inside famous npm dependency trees

I counted the strangers inside famous npm dependency trees

Comments
2 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.