Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
npm
Follow
Hide
Node Package Manager
Posts
Left menu
👋
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
Why Debian packages are safer then NPM and PyPi
Jacob
Jacob
Jacob
Follow
Sep 19 '25
Why Debian packages are safer then NPM and PyPi
#
npm
#
debian
#
pypi
#
worm
Comments
Add Comment
3 min read
Facing the Shai-Hulud Worm: Where the Hell is Easystreet?
Sebastian Schürmann
Sebastian Schürmann
Sebastian Schürmann
Follow
Sep 19 '25
Facing the Shai-Hulud Worm: Where the Hell is Easystreet?
#
npm
#
security
#
github
#
shaihulud
16
reactions
Comments
4
comments
6 min read
Examining the impact of npm supply chain attacks on MCP
Dan Barr
Dan Barr
Dan Barr
Follow
for
Stacklok
Sep 18 '25
Examining the impact of npm supply chain attacks on MCP
#
mcp
#
npm
#
security
#
containers
5
reactions
Comments
Add Comment
3 min read
Want suggestions on my npm package
subhadip pahari
subhadip pahari
subhadip pahari
Follow
Sep 18 '25
Want suggestions on my npm package
#
node
#
javascript
#
npm
#
programming
Comments
1
comment
1 min read
CVE-2024-29415: problem solution
Anton Golub
Anton Golub
Anton Golub
Follow
Sep 16 '25
CVE-2024-29415: problem solution
#
node
#
javascript
#
opensource
#
npm
3
reactions
Comments
1
comment
3 min read
Introducing colorific-magic: Enhance Your Console Logs with Stunning Colors
ANDI NUGROHO
ANDI NUGROHO
ANDI NUGROHO
Follow
Sep 17 '25
Introducing colorific-magic: Enhance Your Console Logs with Stunning Colors
#
node
#
npm
#
opensource
#
webdev
5
reactions
Comments
Add Comment
2 min read
Top Dependency Scanners: A Comprehensive Guide
samlan
samlan
samlan
Follow
Sep 16 '25
Top Dependency Scanners: A Comprehensive Guide
#
webdev
#
security
#
npm
#
softwaredevelopment
1
reaction
Comments
Add Comment
6 min read
The Largest NPM Supply Chain Attack of 2025: A Deep Dive into the Compromise of Billions of Downloads
Om Shree
Om Shree
Om Shree
Follow
Sep 10 '25
The Largest NPM Supply Chain Attack of 2025: A Deep Dive into the Compromise of Billions of Downloads
#
news
#
npm
#
discuss
#
learning
16
reactions
Comments
4
comments
5 min read
Anatomy of a Supply Chain Heist: The Day 'chalk' and 'debug' Became Crypto-Thieves
Figsy
Figsy
Figsy
Follow
Sep 9 '25
Anatomy of a Supply Chain Heist: The Day 'chalk' and 'debug' Became Crypto-Thieves
#
npm
#
javascript
#
security
#
cryptocurrency
7
reactions
Comments
2
comments
17 min read
Adiós a node_modules gigantes: descubre cómo pnpm revoluciona la gestión de paquetes en nuestros proyectos web 🎉
Cristian Fernando
Cristian Fernando
Cristian Fernando
Follow
Sep 10 '25
Adiós a node_modules gigantes: descubre cómo pnpm revoluciona la gestión de paquetes en nuestros proyectos web 🎉
#
javascript
#
webdev
#
spanish
#
npm
2
reactions
Comments
1
comment
4 min read
Beware of npm Packages: The Largest Supply Chain Attack in History
Rebeca Gois
Rebeca Gois
Rebeca Gois
Follow
Sep 9 '25
Beware of npm Packages: The Largest Supply Chain Attack in History
#
javascript
#
node
#
npm
#
webdev
1
reaction
Comments
Add Comment
2 min read
Protecting Yourself from Spear Phishing Attacks Such as the One Targeting NPM Maintainers with 2FA Update
Jayson DeLancey
Jayson DeLancey
Jayson DeLancey
Follow
for
Semgrep
Sep 8 '25
Protecting Yourself from Spear Phishing Attacks Such as the One Targeting NPM Maintainers with 2FA Update
#
npm
#
security
1
reaction
Comments
Add Comment
3 min read
🔥 10 NPM Packages That Will Save You Hours in Backend Development
Manu Kumar Pal
Manu Kumar Pal
Manu Kumar Pal
Follow
Sep 8 '25
🔥 10 NPM Packages That Will Save You Hours in Backend Development
#
backend
#
webdev
#
npm
#
express
9
reactions
Comments
Add Comment
2 min read
The Friendly Guide: "Why WSL is Eating My C: Drive (and How to Get it Back)"
Rasulmmdv
Rasulmmdv
Rasulmmdv
Follow
Sep 6 '25
The Friendly Guide: "Why WSL is Eating My C: Drive (and How to Get it Back)"
#
linux
#
npm
#
tutorial
5
reactions
Comments
Add Comment
3 min read
🚀 Stop Manually Setting Up Projects, Try create-launcher CLI
Pranav Verma
Pranav Verma
Pranav Verma
Follow
Aug 2 '25
🚀 Stop Manually Setting Up Projects, Try create-launcher CLI
#
npm
#
opensource
#
typescript
#
webdev
1
reaction
Comments
Add Comment
2 min read
👋
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account