Skip to content

DEV Community

npm

Node Package Manager

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Apr 13

Setting GitHub as a trusted publisher for npm

#webdev #node #npm #github

2 min read

May 13

The Worm in the Registry

#ai #cybersecurity #npm #github

10 min read

Cristian Carrillo

May 12

Mini Shai-Hulud: un gusano de cadena de suministro que explotó TanStack y el ecosistema npm.

#cybersecurity #supplychain #npm #ciberseguridad

5 min read

Marina Kovalchuk

Apr 8

Malicious `axios@1.14.1` Published: Exfiltrated CI/CD Secrets; Pin Dependency Versions to Mitigate

#security #npm #axios #cicd

12 min read

May 12

Why you keep attacking npm?

#discuss #node #javascript #npm

1 min read

Apr 7

npm Publish Without Tokens

#cicd #github #npm #security

3 min read

Bill Tu

Apr 7

Debugging Node.js in Docker and Kubernetes Without Restarting

#javascript #node #npm

6 min read

Bill Tu

Apr 7

7 Bugs That Taught Us How to Build Better Diagnostic Tools

#javascript #node #npm

8 min read

Bill Tu

Apr 7

Beyond the Event Loop: Tracking Slow I/O in Production Node.js

#javascript #npm #node

8 min read

Apr 7

Validando CNPJ de forma definitiva: Conheça a cnpj-universal (JS/TS)

#javascript #typescript #nestjs #npm

2 min read

Apr 6

The Axios Supply Chain Attack Explained — npm's Biggest Security Breach in 2026

#security #javascript #npm #supplychainattack

16 min read

Apr 6

The Axios Attack Proved npm audit Is Broken. Here's What Would Have Caught It

#npm #security #javascript #opensource

6 min read

Apr 4

The Documentation Attack Surface: How npm Libraries Teach Insecure Patterns

#security #javascript #npm #webdev

4 min read

k-s-h-r

Apr 4

I built Material Symbols SVG, an icon library for using Material Symbols as SVG components

#react #npm #typescript #frontend

5 min read

May 8

Supply chain npm vs PyPI: I compared both simulations and the most dangerous vector isn't what everyone thinks

#english #npm #node #devops

9 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.