DEV Community

npm

Node Package Manager

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
LibKill: Scan Your Machine for Compromised npm, pip, and Bun Packages
firfircelik profile

LibKill: Scan Your Machine for Compromised npm, pip, and Bun Packages

#security #npm #ai #programming
Comments
3 min read
Mini Shai-Hulud: A persistent supply-chain worm
dwayne_mcdaniel profile

Mini Shai-Hulud: A persistent supply-chain worm

#security #supplychain #npm #securityresearch
1
Comments 1
3 min read
How I Built the Two Missing Payload CMS v3 Plugins — Reviews, JSON-LD & Real Production Bugs
spiritrackingarch profile

How I Built the Two Missing Payload CMS v3 Plugins — Reviews, JSON-LD & Real Production Bugs

#npm #nextjs #opensource #payload
1
Comments
5 min read
52,000 packages passed every security check. Chainguard blocked them anyway.
thegatewayguy profile

52,000 packages passed every security check. Chainguard blocked them anyway.

#security #npm #ai #devops
Comments
3 min read
A CVE just hit your base image. Your scanner won't tell you which repos to fix.
danielwe profile

A CVE just hit your base image. Your scanner won't tell you which repos to fix.

#docker #baseimage #cve #npm
Comments
11 min read
Deep Dive: TanStack npm supply-chain compromise
shrutikapoor08 profile

Deep Dive: TanStack npm supply-chain compromise

#githubactions #javascript #npm #security
1
Comments
3 min read
Building a CLI Tool with Node.js (From Zero to npm)
armorbreak profile

Building a CLI Tool with Node.js (From Zero to npm)

#cli #node #npm #tutorial
Comments
4 min read
I Built My Own Config Format for Node.js That Separates Server and Client Secrets
kanishq9 profile

I Built My Own Config Format for Node.js That Separates Server and Client Secrets

#node #npm #security #opensource
1
Comments 2
5 min read
Scanning npm Packages for Malware Before You Install, Without Running Them
pavelespitia profile

Scanning npm Packages for Malware Before You Install, Without Running Them

#security #javascript #npm #devops
Comments 2
6 min read
date-light: A 1.8KB Alternative to date-fns You Might Actually Like
flyingsquirrel0419 profile

date-light: A 1.8KB Alternative to date-fns You Might Actually Like

#javascript #typescript #npm #opensource
1
Comments 2
3 min read
Scarab Diagnostic Field Test #021 — pnpm Self-Upgrade No-Manifest Boundary
scarab-systems profile

Scarab Diagnostic Field Test #021 — pnpm Self-Upgrade No-Manifest Boundary

#discuss #ai #npm #devops
2
Comments
4 min read
The NPM Audit Trap: A Thursday Morning Tragedy
proco profile

The NPM Audit Trap: A Thursday Morning Tragedy

#webdev #node #npm
Comments
2 min read
Microsoft's npm Packages Got Backdoored. Again. And AI Agents Pulled the Trigger.
thegatewayguy profile

Microsoft's npm Packages Got Backdoored. Again. And AI Agents Pulled the Trigger.

#security #devops #npm #kubernetes
Comments
2 min read
Shipping archkit v0.1: a TypeScript Clean Architecture scaffolder built in one Claude Code session
alexrogovjs profile

Shipping archkit v0.1: a TypeScript Clean Architecture scaffolder built in one Claude Code session

#typescript #cleanarchitecture #npm #claudecode
Comments 1
7 min read
Hi all
ayushmahadik profile

Hi all

#showdev #design #npm #ui
Comments
1 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.