Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
npm
Node Package Manager
Follow
Hide
Posts
Left menu
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
The Shai-Hulud Worm Now Steals Your AI Agent Credentials: A 20-Minute npm Audit
jamilxt
jamilxt
jamilxt
Follow
Oct 13
The Shai-Hulud Worm Now Steals Your AI Agent Credentials: A 20-Minute npm Audit
#
security
#
npm
#
supplychain
#
ai
2
 reactions
Comments
Add Comment
8 min read
How to set up a private npm registry: from install to .npmrc, scope, and publish
Wen Ping
Wen Ping
Wen Ping
Follow
Oct 13
How to set up a private npm registry: from install to .npmrc, scope, and publish
#
npm
#
angusrepo
1
 reaction
Comments
Add Comment
6 min read
Add CSV imports to a React app with column mapping and validation
aimodels-fyi
aimodels-fyi
aimodels-fyi
Follow
Oct 17
Add CSV imports to a React app with column mapping and validation
#
react
#
javascript
#
webdev
#
npm
1
 reaction
Comments
Add Comment
3 min read
30,000 Machines Hacked by Fake Job Offers. Mine Was Almost Next.
Bibek Khatri
Bibek Khatri
Bibek Khatri
Follow
Oct 13
30,000 Machines Hacked by Fake Job Offers. Mine Was Almost Next.
#
security
#
career
#
npm
#
interview
Comments
1
 comment
6 min read
Publish a public artifact portal: anonymous /explore install commands
Wen Ping
Wen Ping
Wen Ping
Follow
Oct 12
Publish a public artifact portal: anonymous /explore install commands
#
angusrepo
#
harbor
#
docker
#
npm
2
 reactions
Comments
Add Comment
4 min read
I counted the strangers inside famous npm dependency trees
Prince Jain
Prince Jain
Prince Jain
Follow
Oct 12
I counted the strangers inside famous npm dependency trees
#
npm
#
security
#
opensource
#
tooling
Comments
Add Comment
2 min read
Zod Got Backdoored. Your Lockfile Didn't Save You, Luck Did.
Ashraf
Ashraf
Ashraf
Follow
Oct 12
Zod Got Backdoored. Your Lockfile Didn't Save You, Luck Did.
#
security
#
javascript
#
npm
#
webdev
Comments
Add Comment
3 min read
Our stylesheet was quietly restyling our users' apps. It took us weeks to notice.
AngelBot AI
AngelBot AI
AngelBot AI
Follow
Oct 12
Our stylesheet was quietly restyling our users' apps. It took us weeks to notice.
#
css
#
javascript
#
webdev
#
npm
1
 reaction
Comments
Add Comment
4 min read
AI Keeps Recommending Fake Packages. I Checked Which Ones Are Still Sitting Open.
Noble Ronin
Noble Ronin
Noble Ronin
Follow
Oct 12
AI Keeps Recommending Fake Packages. I Checked Which Ones Are Still Sitting Open.
#
discuss
#
ai
#
security
#
npm
Comments
Add Comment
7 min read
The One-Line Package That Broke create-react-app
Anas Issath
Anas Issath
Anas Issath
Follow
Oct 15
The One-Line Package That Broke create-react-app
#
npm
#
javascript
#
webdev
#
backend
3
 reactions
Comments
2
 comments
5 min read
Building PackageGuard: Dependency Traversal, External APIs, and Explainable Risk Scoring in TypeScript
Ishika Thakur
Ishika Thakur
Ishika Thakur
Follow
Oct 15
Building PackageGuard: Dependency Traversal, External APIs, and Explainable Risk Scoring in TypeScript
#
typescript
#
api
#
npm
#
cli
1
 reaction
Comments
Add Comment
5 min read
MemTensor: When an AI Memory Plugin Becomes the Credential Collector
yutianle
yutianle
yutianle
Follow
Oct 11
MemTensor: When an AI Memory Plugin Becomes the Credential Collector
#
supplychain
#
npm
#
pypi
#
aiagents
Comments
Add Comment
2 min read
The npm Worm Era: Why Package Signatures Did Not Stop Shai-Hulud
OnaEiuspkz
OnaEiuspkz
OnaEiuspkz
Follow
Oct 11
The npm Worm Era: Why Package Signatures Did Not Stop Shai-Hulud
#
supplychain
#
npm
#
cicd
#
secrets
Comments
Add Comment
3 min read
I made string-range-tokens (srTokens) — here’s what to use it for
FSCSS
FSCSS
FSCSS
Follow
Oct 10
I made string-range-tokens (srTokens) — here’s what to use it for
#
javascript
#
typescript
#
npm
#
opensource
Comments
Add Comment
4 min read
Fix: @prisma/client did not initialize yet (Prisma 6 and 7)
nils44344
nils44344
nils44344
Follow
Oct 10
Fix: @prisma/client did not initialize yet (Prisma 6 and 7)
#
prisma
#
npm
#
node
#
database
Comments
Add Comment
5 min read
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account