Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
npm
Follow
Hide
Node Package Manager
Posts
Left menu
👋
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
VSCode の拡張機能のバージョンを固定し、指定以外を無効化する方法
Fomalhaut Weisszwerg
Fomalhaut Weisszwerg
Fomalhaut Weisszwerg
Follow
Sep 19 '25
VSCode の拡張機能のバージョンを固定し、指定以外を無効化する方法
#
vscode
#
shaihulud
#
npm
Comments
Add Comment
3 min read
Shai-Hulud: a self-propagating npm worm hits @ctrl/tinycolor and dozens more packages
CloudDefense.AI
CloudDefense.AI
CloudDefense.AI
Follow
Sep 19 '25
Shai-Hulud: a self-propagating npm worm hits @ctrl/tinycolor and dozens more packages
#
news
#
opensource
#
npm
#
security
2
reactions
Comments
Add Comment
2 min read
Why Debian packages are safer then NPM and PyPi
Jacob
Jacob
Jacob
Follow
Sep 19 '25
Why Debian packages are safer then NPM and PyPi
#
npm
#
debian
#
pypi
#
worm
Comments
Add Comment
3 min read
Facing the Shai-Hulud Worm: Where the Hell is Easystreet?
Sebastian Schürmann
Sebastian Schürmann
Sebastian Schürmann
Follow
Sep 19 '25
Facing the Shai-Hulud Worm: Where the Hell is Easystreet?
#
npm
#
security
#
github
#
shaihulud
16
reactions
Comments
4
comments
6 min read
Examining the impact of npm supply chain attacks on MCP
Dan Barr
Dan Barr
Dan Barr
Follow
for
Stacklok
Sep 18 '25
Examining the impact of npm supply chain attacks on MCP
#
mcp
#
npm
#
security
#
containers
5
reactions
Comments
Add Comment
3 min read
Want suggestions on my npm package
subhadip pahari
subhadip pahari
subhadip pahari
Follow
Sep 18 '25
Want suggestions on my npm package
#
node
#
javascript
#
npm
#
programming
Comments
1
comment
1 min read
Publish your packages to NPM automatically with GitHub Actions
OctoLab Team
OctoLab Team
OctoLab Team
Follow
Aug 15 '25
Publish your packages to NPM automatically with GitHub Actions
#
githubactions
#
devops
#
cicd
#
npm
Comments
Add Comment
3 min read
Node.js Installation Guide
mrchiraggarg
mrchiraggarg
mrchiraggarg
Follow
Aug 15 '25
Node.js Installation Guide
#
node
#
npm
#
webdev
#
programming
Comments
Add Comment
3 min read
Introducing colorific-magic: Enhance Your Console Logs with Stunning Colors
ANDI NUGROHO
ANDI NUGROHO
ANDI NUGROHO
Follow
Sep 17 '25
Introducing colorific-magic: Enhance Your Console Logs with Stunning Colors
#
node
#
npm
#
opensource
#
webdev
5
reactions
Comments
Add Comment
2 min read
The Largest NPM Supply Chain Attack of 2025: A Deep Dive into the Compromise of Billions of Downloads
Om Shree
Om Shree
Om Shree
Follow
Sep 10 '25
The Largest NPM Supply Chain Attack of 2025: A Deep Dive into the Compromise of Billions of Downloads
#
news
#
npm
#
discuss
#
learning
16
reactions
Comments
4
comments
5 min read
Anatomy of a Supply Chain Heist: The Day 'chalk' and 'debug' Became Crypto-Thieves
Figsy
Figsy
Figsy
Follow
Sep 9 '25
Anatomy of a Supply Chain Heist: The Day 'chalk' and 'debug' Became Crypto-Thieves
#
npm
#
javascript
#
security
#
cryptocurrency
7
reactions
Comments
2
comments
17 min read
Adiós a node_modules gigantes: descubre cómo pnpm revoluciona la gestión de paquetes en nuestros proyectos web 🎉
Cristian Fernando
Cristian Fernando
Cristian Fernando
Follow
Sep 10 '25
Adiós a node_modules gigantes: descubre cómo pnpm revoluciona la gestión de paquetes en nuestros proyectos web 🎉
#
javascript
#
webdev
#
spanish
#
npm
2
reactions
Comments
1
comment
4 min read
New npm package to detect silly dependencies
Samuel Tamayo infante
Samuel Tamayo infante
Samuel Tamayo infante
Follow
Aug 7 '25
New npm package to detect silly dependencies
#
showdev
#
npm
#
javascript
#
cli
Comments
Add Comment
1 min read
Beware of npm Packages: The Largest Supply Chain Attack in History
Rebeca Gois
Rebeca Gois
Rebeca Gois
Follow
Sep 9 '25
Beware of npm Packages: The Largest Supply Chain Attack in History
#
javascript
#
node
#
npm
#
webdev
1
reaction
Comments
Add Comment
2 min read
Protecting Yourself from Spear Phishing Attacks Such as the One Targeting NPM Maintainers with 2FA Update
Jayson DeLancey
Jayson DeLancey
Jayson DeLancey
Follow
for
Semgrep
Sep 8 '25
Protecting Yourself from Spear Phishing Attacks Such as the One Targeting NPM Maintainers with 2FA Update
#
npm
#
security
1
reaction
Comments
Add Comment
3 min read
👋
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account