Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
npm
Node Package Manager
Follow
Hide
Posts
Left menu
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
OpenClaw got 591 advisories. 1 in 4 top npm installs is the real hole
Matt Busel
Matt Busel
Matt Busel
Follow
Oct 24
OpenClaw got 591 advisories. 1 in 4 top npm installs is the real hole
#
security
#
npm
#
opensource
#
ai
Comments
Add Comment
15 min read
Moderation
I made an interactive Sakura tree that runs in your browser, and you can add it to your own website with npm. Its about 16 KB 🌸
Andrew
Andrew
Andrew
Follow
Oct 28
I made an interactive Sakura tree that runs in your browser, and you can add it to your own website with npm. Its about 16 KB 🌸
#
showdev
#
javascript
#
npm
#
webdev
1
 reaction
Comments
Add Comment
1 min read
Moderation
Two Worms, One Blind Spot
relayshieldadmin
relayshieldadmin
relayshieldadmin
Follow
Oct 23
Two Worms, One Blind Spot
#
malware
#
supplychain
#
npm
#
security
Comments
Add Comment
3 min read
Moderation
Is this project npm, pnpm, Yarn 1 or Yarn 4? How to tell, and why Yarn is the tricky one
Alex
Alex
Alex
Follow
Oct 22
Is this project npm, pnpm, Yarn 1 or Yarn 4? How to tell, and why Yarn is the tricky one
#
javascript
#
node
#
npm
#
tooling
Comments
Add Comment
4 min read
Moderation
pnpm vs npm Security in 2026: Install Scripts and Release Age, Tested
Waseem Anjum
Waseem Anjum
Waseem Anjum
Follow
Nov 4
pnpm vs npm Security in 2026: Install Scripts and Release Age, Tested
#
security
#
node
#
npm
#
javascript
1
 reaction
Comments
Add Comment
6 min read
Moderation
10 TypeScript files, 5 SDK artefacts: typed in Node and Deno
Panth Patel
Panth Patel
Panth Patel
Follow
Oct 20
10 TypeScript files, 5 SDK artefacts: typed in Node and Deno
#
typescript
#
javascript
#
deno
#
npm
Comments
Add Comment
5 min read
Moderation
Your Coding Agent Added an npm Package. 6 Commands to Vet It Before You Land the Branch
Gabriel Anhaia
Gabriel Anhaia
Gabriel Anhaia
Follow
Oct 20
Your Coding Agent Added an npm Package. 6 Commands to Vet It Before You Land the Branch
#
npm
#
security
#
ai
#
tutorial
1
 reaction
Comments
Add Comment
8 min read
Moderation
Securing your pnpm supply chain
Léo Pradel
Léo Pradel
Léo Pradel
Follow
Oct 20
Securing your pnpm supply chain
#
security
#
node
#
javascript
#
npm
Comments
Add Comment
2 min read
Moderation
The Nx Malware Ran Claude Code With --dangerously-skip-permissions. Could It on Yours?
Gabriel Anhaia
Gabriel Anhaia
Gabriel Anhaia
Follow
Oct 19
The Nx Malware Ran Claude Code With --dangerously-skip-permissions. Could It on Yours?
#
security
#
ai
#
npm
#
devtools
Comments
Add Comment
8 min read
Moderation
I Found a Fourth Package Registry My Sandbox Could Reach. It Checksums Every File, Not Just the Tarball.
Noble Ronin
Noble Ronin
Noble Ronin
Follow
Oct 19
I Found a Fourth Package Registry My Sandbox Could Reach. It Checksums Every File, Not Just the Tarball.
#
discuss
#
programming
#
security
#
npm
Comments
Add Comment
6 min read
Moderation
I Publish npm Packages With No Tokens Stored Anywhere — Here's the Setup
Cody Pack
Cody Pack
Cody Pack
Follow
Oct 17
I Publish npm Packages With No Tokens Stored Anywhere — Here's the Setup
#
npm
#
githubactions
#
security
#
opensource
Comments
Add Comment
4 min read
Moderation
Introducing @zervonex/baileys - A Tailored Fork of the Baileys WhatsApp Web API
zervonex
zervonex
zervonex
Follow
Oct 18
Introducing @zervonex/baileys - A Tailored Fork of the Baileys WhatsApp Web API
#
node
#
npm
#
javascript
#
zervonex
Comments
Add Comment
2 min read
Moderation
Check that a package exists before your AI agent installs it
MĂĄrten Fitzback
MĂĄrten Fitzback
MĂĄrten Fitzback
Follow
Oct 17
Check that a package exists before your AI agent installs it
#
ai
#
security
#
npm
#
python
Comments
Add Comment
2 min read
Moderation
Dangerous package 'imgdecode' downloaded 979 times from npm library
Hacks.gr
Hacks.gr
Hacks.gr
Follow
Oct 17
Dangerous package 'imgdecode' downloaded 979 times from npm library
#
npm
#
node
#
supplychain
#
malware
Comments
Add Comment
2 min read
Moderation
The Tensorlake Worm Commits a .claude Folder So It Runs Again When You Open Claude Code
Gabriel Anhaia
Gabriel Anhaia
Gabriel Anhaia
Follow
Oct 16
The Tensorlake Worm Commits a .claude Folder So It Runs Again When You Open Claude Code
#
security
#
ai
#
npm
#
git
Comments
Add Comment
10 min read
Moderation
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account