DEV Community

npm

Node Package Manager

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
I audited 25 top npm packages with a zero-install CLI. Here's who passes.

I audited 25 top npm packages with a zero-install CLI. Here's who passes.

1
Comments
4 min read
Three npm Disasters That Were Predictable (And What the Signals Looked Like)

Three npm Disasters That Were Predictable (And What the Signals Looked Like)

1
Comments
6 min read
CanisterWorm Malware Wipes Data on Iranian Machines via Compromised npm Packages and ICP Canisters

CanisterWorm Malware Wipes Data on Iranian Machines via Compromised npm Packages and ICP Canisters

1
Comments 1
7 min read
Publish your npm package using Changesets and GitHub actions

Publish your npm package using Changesets and GitHub actions

1
Comments
4 min read
🛡️ حل احترافي لثغرة Prototype Pollution في protobufjs

🛡️ حل احترافي لثغرة Prototype Pollution في protobufjs

2
Comments 1
3 min read
From Chaos to Control: Multiple Node.js Environments with Multi-Env CLI

From Chaos to Control: Multiple Node.js Environments with Multi-Env CLI

1
Comments
3 min read
Ataque à Cadeia de Suprimentos: O Pacote NPM Que Pode Derrubar Sua Empresa

Ataque à Cadeia de Suprimentos: O Pacote NPM Que Pode Derrubar Sua Empresa

Comments
2 min read
Two Types of npm Supply Chain Attack: What Catches Each

Two Types of npm Supply Chain Attack: What Catches Each

Comments
5 min read
I Scanned 2,386 MCP Packages on npm. 402 Were Critical. Here's What I Found.

I Scanned 2,386 MCP Packages on npm. 402 Were Critical. Here's What I Found.

Comments
3 min read
I Build Javascript/Typescript API wrapper SDK

I Build Javascript/Typescript API wrapper SDK

Comments
3 min read
Bitwarden CLI comprometido: lo que un supply chain attack sobre una herramienta que uso me obliga a revisar

Bitwarden CLI comprometido: lo que un supply chain attack sobre una herramienta que uso me obliga a revisar

1
Comments
9 min read
Bitwarden CLI compromised: what a supply chain attack on a tool I actually use forces me to audit

Bitwarden CLI compromised: what a supply chain attack on a tool I actually use forces me to audit

Comments
8 min read
I Built a Free Supply Chain Scanner After Watching Hermes-Agent Get Infected

I Built a Free Supply Chain Scanner After Watching Hermes-Agent Get Infected

1
Comments
4 min read
10 npm Packages You'll Actually Use in 2026

10 npm Packages You'll Actually Use in 2026

Comments
5 min read
Notifee is Archived. Here’s a Maintained, New-Architecture Drop-in Replacement

Notifee is Archived. Here’s a Maintained, New-Architecture Drop-in Replacement

Comments
5 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.