DEV Community

npm

Node Package Manager

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Why You Shouldn't Run npm install in Production Containers

Why You Shouldn't Run npm install in Production Containers

Comments
2 min read
npm Supply Chain Audit: The Checklist Most Teams Stop Too Early

npm Supply Chain Audit: The Checklist Most Teams Stop Too Early

Comments
6 min read
Why I Stopped Writing 15 * 60 * 1000 in Every Project

Why I Stopped Writing 15 * 60 * 1000 in Every Project

3
Comments 5
5 min read
How We Catch the Axios DPRK RAT — Directly in Your IDE

How We Catch the Axios DPRK RAT — Directly in Your IDE

2
Comments
3 min read
Building a Customizable Avatar System in React (Without Creating Everything From Scratch)

Building a Customizable Avatar System in React (Without Creating Everything From Scratch)

6
Comments
4 min read
thusdev-fetch atteint 256 téléchargements npm en 2 jours !

thusdev-fetch atteint 256 téléchargements npm en 2 jours !

3
Comments
1 min read
How I responded to a Supply Chain attack before it hit my project

How I responded to a Supply Chain attack before it hit my project

3
Comments 3
3 min read
My AI told me to pip install a package that doesn't exist. Turns out someone already weaponized that.

My AI told me to pip install a package that doesn't exist. Turns out someone already weaponized that.

Comments
2 min read
Le migliori librerie di notifiche per React Native nel 2026: quale scegliere?

Le migliori librerie di notifiche per React Native nel 2026: quale scegliere?

Comments
7 min read
Lazy SRE's guide to secure systems, part 1: the dependencies you didn't read

Lazy SRE's guide to secure systems, part 1: the dependencies you didn't read

Comments
7 min read
Hardening Your npm CI in 5 Concrete Layers

Hardening Your npm CI in 5 Concrete Layers

1
Comments
2 min read
axios npm Supply Chain Attack (March 31, 2026) — What Happened and How to Check Your Lock File Right Now

axios npm Supply Chain Attack (March 31, 2026) — What Happened and How to Check Your Lock File Right Now

1
Comments
6 min read
Why npm supply chain attacks keep happening and how to harden your installs

Why npm supply chain attacks keep happening and how to harden your installs

Comments
4 min read
All It Took Was npm install (Axios Attack)

All It Took Was npm install (Axios Attack)

1
Comments
4 min read
Completing the Picture: Adding Memory Diagnostics to a CPU Profiler

Completing the Picture: Adding Memory Diagnostics to a CPU Profiler

Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.