DEV Community

npm

Node Package Manager

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Anthropic Accidentally Published 513K Lines of Claude Code Source on npm — What Developers Need to Know

Anthropic Accidentally Published 513K Lines of Claude Code Source on npm — What Developers Need to Know

Comments
2 min read
When the Patient Dies on the Table: Handling Target Process Exit During Profiling

When the Patient Dies on the Table: Handling Target Process Exit During Profiling

Comments
5 min read
Less Is More: Why We Added a Flag to Disable Our Best Feature

Less Is More: Why We Added a Flag to Disable Our Best Feature

Comments
4 min read
Not All Requests Are Equal: Adding Variable Cost to a Node.js Rate Limiter

Not All Requests Are Equal: Adding Variable Cost to a Node.js Rate Limiter

2
Comments
6 min read
42 @tanstack/* Packages Were Compromised on npm: What Happened, How It Works, and What You Must Do Right Now

42 @tanstack/* Packages Were Compromised on npm: What Happened, How It Works, and What You Must Do Right Now

Comments
10 min read
I got tired of calculating commercial lease billing by hand, so I built a tool

I got tired of calculating commercial lease billing by hand, so I built a tool

4
Comments
2 min read
MCP Ecosystem Security Pulse: April 2026

MCP Ecosystem Security Pulse: April 2026

1
Comments
3 min read
Setting GitHub as a trusted publisher for npm

Setting GitHub as a trusted publisher for npm

1
Comments
2 min read
The Worm in the Registry

The Worm in the Registry

2
Comments
10 min read
Mini Shai-Hulud: un gusano de cadena de suministro que explotĂł TanStack y el ecosistema npm.

Mini Shai-Hulud: un gusano de cadena de suministro que explotĂł TanStack y el ecosistema npm.

2
Comments
5 min read
Malicious `axios@1.14.1` Published: Exfiltrated CI/CD Secrets; Pin Dependency Versions to Mitigate

Malicious `axios@1.14.1` Published: Exfiltrated CI/CD Secrets; Pin Dependency Versions to Mitigate

Comments
12 min read
Why you keep attacking npm?

Why you keep attacking npm?

2
Comments
1 min read
npm Publish Without Tokens

npm Publish Without Tokens

Comments
3 min read
Debugging Node.js in Docker and Kubernetes Without Restarting

Debugging Node.js in Docker and Kubernetes Without Restarting

Comments
6 min read
7 Bugs That Taught Us How to Build Better Diagnostic Tools

7 Bugs That Taught Us How to Build Better Diagnostic Tools

1
Comments
8 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.