Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
npm
Follow
Hide
Node Package Manager
Posts
Left menu
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
20 one-shot prompts that turn Kanban into an autonomous coding machine
Tony Loehr
Tony Loehr
Tony Loehr
Follow
Apr 6
20 one-shot prompts that turn Kanban into an autonomous coding machine
#
ai
#
automation
#
community
#
npm
1
 reaction
Comments
Add Comment
11 min read
Detecting Event Loop Blocking in Production Node.js — Without Touching Your Code
Bill Tu
Bill Tu
Bill Tu
Follow
Apr 6
Detecting Event Loop Blocking in Production Node.js — Without Touching Your Code
#
node
#
npm
#
javascript
2
 reactions
Comments
1
 comment
7 min read
Case Study: How I Dogfood DevRadar Guard on a 954-Dependency Project
Joseph Yeo
Joseph Yeo
Joseph Yeo
Follow
Apr 6
Case Study: How I Dogfood DevRadar Guard on a 954-Dependency Project
#
npm
#
security
#
supplychain
#
opensource
1
 reaction
Comments
Add Comment
4 min read
I built an npm malware scanner in Rust because npm audit isn't enough
Pool Camacho
Pool Camacho
Pool Camacho
Follow
Apr 3
I built an npm malware scanner in Rust because npm audit isn't enough
#
npm
#
security
#
rust
#
opensource
3
 reactions
Comments
4
 comments
3 min read
Axios Was Compromised. Here's What It Means for Your Repo.
Joseph Yeo
Joseph Yeo
Joseph Yeo
Follow
Apr 6
Axios Was Compromised. Here's What It Means for Your Repo.
#
security
#
npm
#
supplychain
#
opensource
Comments
Add Comment
3 min read
A North Korean Backdoor Lived Inside Axios for 3 Hours. Millions of Pipelines Pulled It.
Gabriel Anhaia
Gabriel Anhaia
Gabriel Anhaia
Follow
Apr 5
A North Korean Backdoor Lived Inside Axios for 3 Hours. Millions of Pipelines Pulled It.
#
security
#
javascript
#
npm
#
node
Comments
Add Comment
8 min read
What Your Linter Can't Catch: The Invisible Unicode Attacks Hitting GitHub
Raye Deng
Raye Deng
Raye Deng
Follow
Mar 16
What Your Linter Can't Catch: The Invisible Unicode Attacks Hitting GitHub
#
security
#
javascript
#
npm
#
webdev
1
 reaction
Comments
Add Comment
4 min read
npm package commitment scores: zod has 139M weekly downloads and one maintainer
Pico
Pico
Pico
Follow
Apr 5
npm package commitment scores: zod has 139M weekly downloads and one maintainer
#
security
#
npm
#
opensource
#
webdev
Comments
Add Comment
4 min read
I Built a Lightweight i18n Library for JavaScript — Meet globaly-i18n
Rounak Sharrma
Rounak Sharrma
Rounak Sharrma
Follow
Mar 15
I Built a Lightweight i18n Library for JavaScript — Meet globaly-i18n
#
javascript
#
opensource
#
npm
#
react
1
 reaction
Comments
Add Comment
3 min read
I Haven't Opened the npm Website in Months. Here's How.
Alan West
Alan West
Alan West
Follow
Mar 25
I Haven't Opened the npm Website in Months. Here's How.
#
mcp
#
npm
#
javascript
#
ai
1
 reaction
Comments
Add Comment
4 min read
How the Axios Supply Chain Attack Worked - And How to Detect It Earlier
HorseyofCoursey
HorseyofCoursey
HorseyofCoursey
Follow
Apr 4
How the Axios Supply Chain Attack Worked - And How to Detect It Earlier
#
security
#
npm
#
node
#
opensource
Comments
Add Comment
3 min read
MCP Connector Poisoning: How Compromised npm Packages Hijack Your AI Agent
Toni Antunovic
Toni Antunovic
Toni Antunovic
Follow
Apr 4
MCP Connector Poisoning: How Compromised npm Packages Hijack Your AI Agent
#
security
#
npm
#
javascript
#
devops
Comments
2
 comments
5 min read
Axios got compromised. They attacked the human, not code.
DHg
DHg
DHg
Follow
Apr 4
Axios got compromised. They attacked the human, not code.
#
npm
#
security
#
axios
#
opensource
3
 reactions
Comments
Add Comment
4 min read
npm install puede infectar tu máquina: cómo protegerte
Axel Espinosa
Axel Espinosa
Axel Espinosa
Follow
Apr 4
npm install puede infectar tu máquina: cómo protegerte
#
discuss
#
security
#
npm
#
node
2
 reactions
Comments
1
 comment
7 min read
I'm 12 and I built a 2KB 0 dependency alternative to CASL!
CreeperGuy14
CreeperGuy14
CreeperGuy14
Follow
Apr 3
I'm 12 and I built a 2KB 0 dependency alternative to CASL!
#
showdev
#
npm
#
typescript
#
node
Comments
1
 comment
1 min read
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account