DEV Community

npm

Node Package Manager

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Hono Has 34M Weekly Downloads and One Maintainer

Hono Has 34M Weekly Downloads and One Maintainer

Comments
3 min read
You've probably never heard of these npm packages. They're in your production app.

You've probably never heard of these npm packages. They're in your production app.

Comments
3 min read
I audited 25 top npm packages with a zero-install CLI. Here's who passes.

I audited 25 top npm packages with a zero-install CLI. Here's who passes.

1
Comments
4 min read
Three npm Disasters That Were Predictable (And What the Signals Looked Like)

Three npm Disasters That Were Predictable (And What the Signals Looked Like)

1
Comments
6 min read
CanisterWorm Malware Wipes Data on Iranian Machines via Compromised npm Packages and ICP Canisters

CanisterWorm Malware Wipes Data on Iranian Machines via Compromised npm Packages and ICP Canisters

1
Comments 1
7 min read
Publish your npm package using Changesets and GitHub actions

Publish your npm package using Changesets and GitHub actions

1
Comments
4 min read
When GitHub Actions Goes Silent: The Pending-Forever Bug I Hit Shipping My MCP Server to npm

When GitHub Actions Goes Silent: The Pending-Forever Bug I Hit Shipping My MCP Server to npm

Comments
5 min read
🛡️ حل احترافي لثغرة Prototype Pollution في protobufjs

🛡️ حل احترافي لثغرة Prototype Pollution في protobufjs

2
Comments 1
3 min read
From Chaos to Control: Multiple Node.js Environments with Multi-Env CLI

From Chaos to Control: Multiple Node.js Environments with Multi-Env CLI

1
Comments
3 min read
Ataque à Cadeia de Suprimentos: O Pacote NPM Que Pode Derrubar Sua Empresa

Ataque à Cadeia de Suprimentos: O Pacote NPM Que Pode Derrubar Sua Empresa

Comments
2 min read
Two Types of npm Supply Chain Attack: What Catches Each

Two Types of npm Supply Chain Attack: What Catches Each

Comments
5 min read
I Scanned 2,386 MCP Packages on npm. 402 Were Critical. Here's What I Found.

I Scanned 2,386 MCP Packages on npm. 402 Were Critical. Here's What I Found.

Comments
3 min read
I Build Javascript/Typescript API wrapper SDK

I Build Javascript/Typescript API wrapper SDK

Comments
3 min read
Bitwarden CLI comprometido: lo que un supply chain attack sobre una herramienta que uso me obliga a revisar

Bitwarden CLI comprometido: lo que un supply chain attack sobre una herramienta que uso me obliga a revisar

1
Comments
9 min read
Bitwarden CLI compromised: what a supply chain attack on a tool I actually use forces me to audit

Bitwarden CLI compromised: what a supply chain attack on a tool I actually use forces me to audit

Comments
8 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.