DEV Community

npm

Node Package Manager

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
packaged something

packaged something

Comments 1
1 min read
npm 12 Blocks Install Scripts by Default. Node 26 LTS, Out Oct 28, Still Ships npm 11.

npm 12 Blocks Install Scripts by Default. Node 26 LTS, Out Oct 28, Still Ships npm 11.

Comments
8 min read
Cooldown 1 Hari Memblokir 70% Rilis npm yang Dibajak di 2026. Untuk Typosquat, 7 Hari Masih Meloloskan 45%

Cooldown 1 Hari Memblokir 70% Rilis npm yang Dibajak di 2026. Untuk Typosquat, 7 Hari Masih Meloloskan 45%

Comments
7 min read
npm vs PyPI MCP servers: dependency advisories side by side

npm vs PyPI MCP servers: dependency advisories side by side

Comments
3 min read
india-formatter: A Lightweight JavaScript Toolkit for Indian Developers 🇮🇳

india-formatter: A Lightweight JavaScript Toolkit for Indian Developers 🇮🇳

Comments
3 min read
242,072 malware flags on npm and PyPI, and what the registries did about them

242,072 malware flags on npm and PyPI, and what the registries did about them

Comments
12 min read
Edit CurrĂ­culo Lattes XML Safely with TypeScript and lattes-toolkit

Edit CurrĂ­culo Lattes XML Safely with TypeScript and lattes-toolkit

Comments
6 min read
Upgrade a Major Dependency With a Coding Agent: Changelog First, Then the Failing Tests

Upgrade a Major Dependency With a Coding Agent: Changelog First, Then the Failing Tests

Comments
10 min read
A 1-Day Cooldown Would Have Blocked 70% of 2026's Hijacked npm Releases. Against Typosquats, 7 Days Still Misses 45%

A 1-Day Cooldown Would Have Blocked 70% of 2026's Hijacked npm Releases. Against Typosquats, 7 Days Still Misses 45%

1
Comments
8 min read
Continuation of the discussion about Gemini

Continuation of the discussion about Gemini

1
Comments
5 min read
Slopsquatting: Your AI Assistant Invents Packages, Attackers Register Them

Slopsquatting: Your AI Assistant Invents Packages, Attackers Register Them

Comments
7 min read
The Hard Part of Leaving `request` is the App Built Around It

The Hard Part of Leaving `request` is the App Built Around It

1
Comments
3 min read
In 2013 I wrote a diploma on elliptic curves. Last night my tool used them to check its own release.

In 2013 I wrote a diploma on elliptic curves. Last night my tool used them to check its own release.

2
Comments
7 min read
DevYard: Resurrecting the Ghosts in Your Code Machine with Local Open-Source AI

Hacktoberfest Open-Source AI Challenge: Ghost in the Machine Submission 👻🌼

DevYard: Resurrecting the Ghosts in Your Code Machine with Local Open-Source AI

Comments
3 min read
Deobfuscating Malicious npm & Browser Payloads: Base64, Hex, Unicode Escapes & Homoglyphs

Deobfuscating Malicious npm & Browser Payloads: Base64, Hex, Unicode Escapes & Homoglyphs

Comments
8 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.