Skip to content

DEV Community

npm

Node Package Manager

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Apr 7

Validando CNPJ de forma definitiva: Conheça a cnpj-universal (JS/TS)

#javascript #typescript #nestjs #npm

2 min read

Apr 6

The Axios Supply Chain Attack Explained — npm's Biggest Security Breach in 2026

#security #javascript #npm #supplychainattack

16 min read

Pico

Apr 5

npm package commitment scores: zod has 139M weekly downloads and one maintainer

#security #npm #opensource #webdev

4 min read

Apr 6

The Axios Attack Proved npm audit Is Broken. Here's What Would Have Caught It

#npm #security #javascript #opensource

6 min read

Apr 4

The Documentation Attack Surface: How npm Libraries Teach Insecure Patterns

#security #javascript #npm #webdev

4 min read

k-s-h-r

Apr 4

I built Material Symbols SVG, an icon library for using Material Symbols as SVG components

#react #npm #typescript #frontend

5 min read

Apr 4

Why Your AI Coding Agent Keeps Recommending Dead Packages

#agents #ai #npm #programming

2 min read

May 8

I never expected this response ~robot-toast

#javascript #webdev #opensource #npm

2 min read

Artyom Kornilov

Apr 4

Malicious npm Packages Disguised as Strapi Plugins Enable Data Exfiltration and Remote Code Execution

#npm #strapi #malware #exfiltration

7 min read

0xkoji

Apr 3

Supply Chain Security measures

#security #npm #uv #githubactions

1 min read

Kazu

Apr 14

Shipping a Go CLI to Every Ecosystem: GitHub Releases, Homebrew, and npm

#cli #github #go #npm

5 min read

May 7

npm audit isn't enough: I simulated a supply chain attack on my Node dependencies and found what the scanner can't see

#english #typescript #npm #devops

9 min read

May 7

npm audit no alcanza: simulé un supply chain attack sobre mis dependencias de Node y encontré lo que el scanner no ve

#spanish #espanol #typescript #npm

10 min read

Apr 4

The Axios/npm Incident & Why AI Won’t Replace Devs

#ai #javascript #npm #security

1 min read

Apr 3

I built an npm malware scanner and found 21 malicious packages in 24 hours

#security #npm #javascript #opensource

1 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.