DEV Community

npm

Node Package Manager

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
CanisterWorm Malware Wipes Data on Iranian Machines via Compromised npm Packages and ICP Canisters

CanisterWorm Malware Wipes Data on Iranian Machines via Compromised npm Packages and ICP Canisters

1
Comments 1
7 min read
Publish your npm package using Changesets and GitHub actions

Publish your npm package using Changesets and GitHub actions

1
Comments
4 min read
When GitHub Actions Goes Silent: The Pending-Forever Bug I Hit Shipping My MCP Server to npm

When GitHub Actions Goes Silent: The Pending-Forever Bug I Hit Shipping My MCP Server to npm

Comments
5 min read
🛡️ حل احترافي لثغرة Prototype Pollution في protobufjs

🛡️ حل احترافي لثغرة Prototype Pollution في protobufjs

2
Comments 1
3 min read
From Chaos to Control: Multiple Node.js Environments with Multi-Env CLI

From Chaos to Control: Multiple Node.js Environments with Multi-Env CLI

1
Comments
3 min read
Ataque à Cadeia de Suprimentos: O Pacote NPM Que Pode Derrubar Sua Empresa

Ataque à Cadeia de Suprimentos: O Pacote NPM Que Pode Derrubar Sua Empresa

Comments
2 min read
Two Types of npm Supply Chain Attack: What Catches Each

Two Types of npm Supply Chain Attack: What Catches Each

Comments
5 min read
I Scanned 2,386 MCP Packages on npm. 402 Were Critical. Here's What I Found.

I Scanned 2,386 MCP Packages on npm. 402 Were Critical. Here's What I Found.

Comments
3 min read
I Build Javascript/Typescript API wrapper SDK

I Build Javascript/Typescript API wrapper SDK

Comments
3 min read
Bitwarden CLI comprometido: lo que un supply chain attack sobre una herramienta que uso me obliga a revisar

Bitwarden CLI comprometido: lo que un supply chain attack sobre una herramienta que uso me obliga a revisar

1
Comments
9 min read
Bitwarden CLI compromised: what a supply chain attack on a tool I actually use forces me to audit

Bitwarden CLI compromised: what a supply chain attack on a tool I actually use forces me to audit

Comments
8 min read
I Built a Free Supply Chain Scanner After Watching Hermes-Agent Get Infected

I Built a Free Supply Chain Scanner After Watching Hermes-Agent Get Infected

1
Comments
4 min read
10 npm Packages You'll Actually Use in 2026

10 npm Packages You'll Actually Use in 2026

Comments
5 min read
Notifee is Archived. Here’s a Maintained, New-Architecture Drop-in Replacement

Notifee is Archived. Here’s a Maintained, New-Architecture Drop-in Replacement

Comments
5 min read
O básico para gerenciar e se proteger de vulnerabilidades em dependências no seu projeto Node.

O básico para gerenciar e se proteger de vulnerabilidades em dependências no seu projeto Node.

37
Comments 1
4 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.