Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
npm
Node Package Manager
Follow
Hide
Posts
Left menu
👋
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
Three npm Disasters That Were Predictable (And What the Signals Looked Like)
Pico
Pico
Pico
Follow
Apr 30
Three npm Disasters That Were Predictable (And What the Signals Looked Like)
#
npm
#
security
#
javascript
#
opensource
1
reaction
Comments
Add Comment
6 min read
CanisterWorm Malware Wipes Data on Iranian Machines via Compromised npm Packages and ICP Canisters
Olga Larionova
Olga Larionova
Olga Larionova
Follow
Mar 27
CanisterWorm Malware Wipes Data on Iranian Machines via Compromised npm Packages and ICP Canisters
#
malware
#
cybersecurity
#
npm
#
c2
1
reaction
Comments
1
comment
7 min read
Publish your npm package using Changesets and GitHub actions
tsevdos
tsevdos
tsevdos
Follow
Apr 29
Publish your npm package using Changesets and GitHub actions
#
npm
#
package
#
changesets
#
githubactions
1
reaction
Comments
Add Comment
4 min read
🛡️ حل احترافي لثغرة Prototype Pollution في protobufjs
🎖️المحارب الرقمي🎖️
🎖️المحارب الرقمي🎖️
🎖️المحارب الرقمي🎖️
Follow
Apr 28
🛡️ حل احترافي لثغرة Prototype Pollution في protobufjs
#
cybersecurity
#
javascript
#
npm
#
security
2
reactions
Comments
1
comment
3 min read
From Chaos to Control: Multiple Node.js Environments with Multi-Env CLI
CinfiniteDev
CinfiniteDev
CinfiniteDev
Follow
Mar 25
From Chaos to Control: Multiple Node.js Environments with Multi-Env CLI
#
javascript
#
cli
#
opensource
#
npm
1
reaction
Comments
Add Comment
3 min read
Ataque à Cadeia de Suprimentos: O Pacote NPM Que Pode Derrubar Sua Empresa
Gabriel Lima Ferreira
Gabriel Lima Ferreira
Gabriel Lima Ferreira
Follow
Mar 23
Ataque à Cadeia de Suprimentos: O Pacote NPM Que Pode Derrubar Sua Empresa
#
supplychain
#
npm
#
devsecops
#
sca
Comments
Add Comment
2 min read
Two Types of npm Supply Chain Attack: What Catches Each
Pico
Pico
Pico
Follow
Apr 26
Two Types of npm Supply Chain Attack: What Catches Each
#
npm
#
security
#
supplychain
#
javascript
Comments
Add Comment
5 min read
I Scanned 2,386 MCP Packages on npm. 402 Were Critical. Here's What I Found.
Adamthereal
Adamthereal
Adamthereal
Follow
Mar 22
I Scanned 2,386 MCP Packages on npm. 402 Were Critical. Here's What I Found.
#
security
#
opensource
#
ai
#
npm
Comments
Add Comment
3 min read
I Build Javascript/Typescript API wrapper SDK
Madhav Majumdar
Madhav Majumdar
Madhav Majumdar
Follow
Mar 22
I Build Javascript/Typescript API wrapper SDK
#
api
#
javascript
#
npm
#
typescript
Comments
Add Comment
3 min read
Bitwarden CLI comprometido: lo que un supply chain attack sobre una herramienta que uso me obliga a revisar
Juan Torchia
Juan Torchia
Juan Torchia
Follow
Apr 24
Bitwarden CLI comprometido: lo que un supply chain attack sobre una herramienta que uso me obliga a revisar
#
spanish
#
espanol
#
npm
#
devops
1
reaction
Comments
Add Comment
9 min read
Bitwarden CLI compromised: what a supply chain attack on a tool I actually use forces me to audit
Juan Torchia
Juan Torchia
Juan Torchia
Follow
Apr 24
Bitwarden CLI compromised: what a supply chain attack on a tool I actually use forces me to audit
#
english
#
npm
#
devops
#
supplychain
Comments
Add Comment
8 min read
I Built a Free Supply Chain Scanner After Watching Hermes-Agent Get Infected
Tiamat
Tiamat
Tiamat
Follow
Mar 25
I Built a Free Supply Chain Scanner After Watching Hermes-Agent Get Infected
#
security
#
npm
#
python
#
ai
1
reaction
Comments
Add Comment
4 min read
10 npm Packages You'll Actually Use in 2026
Tommaso Bertocchi
Tommaso Bertocchi
Tommaso Bertocchi
Follow
Apr 22
10 npm Packages You'll Actually Use in 2026
#
node
#
npm
#
javascript
#
webdev
Comments
Add Comment
5 min read
Notifee is Archived. Here’s a Maintained, New-Architecture Drop-in Replacement
Marco Crupi
Marco Crupi
Marco Crupi
Follow
Apr 10
Notifee is Archived. Here’s a Maintained, New-Architecture Drop-in Replacement
#
reactnative
#
refactoring
#
opensource
#
npm
Comments
Add Comment
5 min read
Welcome to Transitive Dependency Hell
RoseSecurity
RoseSecurity
RoseSecurity
Follow
Mar 31
Welcome to Transitive Dependency Hell
#
javascript
#
npm
#
security
Comments
1
comment
5 min read
👋
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account