Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
npm
Node Package Manager
Follow
Hide
Posts
Left menu
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
7 Things I Wish migrate-mongo Had After a Few Production Incidents
Santosh Gupta
Santosh Gupta
Santosh Gupta
Follow
Aug 10
7 Things I Wish migrate-mongo Had After a Few Production Incidents
#
mongodb
#
node
#
database
#
npm
Comments
2
 comments
4 min read
I Added an MCP Server to NPMScan for AI Coding Agents
block_hacks
block_hacks
block_hacks
Follow
Jul 28
I Added an MCP Server to NPMScan for AI Coding Agents
#
mcp
#
claude
#
npm
#
security
Comments
1
 comment
2 min read
Shai-Hulud Strikes Back: Keyv, Cacheable & 800+ npm Packages Hijacked in Massive Worm Attack
Devam Chaudhari
Devam Chaudhari
Devam Chaudhari
Follow
Aug 5
Shai-Hulud Strikes Back: Keyv, Cacheable & 800+ npm Packages Hijacked in Massive Worm Attack
#
security
#
npm
#
devops
#
vulnerabilities
Comments
3
 comments
5 min read
pnpm just saved my day
hero50
hero50
hero50
Follow
Jul 2
pnpm just saved my day
#
webdev
#
npm
#
javascript
#
pnpm
1
 reaction
Comments
Add Comment
1 min read
The State of JavaScript Date Pickers in 2026
RollDate
RollDate
RollDate
Follow
Aug 4
The State of JavaScript Date Pickers in 2026
#
npm
#
webdev
#
javascript
#
opensource
Comments
Add Comment
4 min read
A hands-free npm publish pipeline for SignalK plugins
Bryan Clark
Bryan Clark
Bryan Clark
Follow
Jun 30
A hands-free npm publish pipeline for SignalK plugins
#
signalk
#
npm
#
oidc
#
trustedpublishing
Comments
Add Comment
8 min read
A Linux RAT in your npm install: what phi sees before it runs
Prosper Maxwell
Prosper Maxwell
Prosper Maxwell
Follow
Jun 30
A Linux RAT in your npm install: what phi sees before it runs
#
npm
#
security
#
devops
#
node
Comments
Add Comment
3 min read
Preserving Context When Moving from ChatGPT to Codex CLI
Viacheslav Bogdanov
Viacheslav Bogdanov
Viacheslav Bogdanov
Follow
Jun 30
Preserving Context When Moving from ChatGPT to Codex CLI
#
openai
#
npm
#
ai
#
cli
1
 reaction
Comments
Add Comment
3 min read
CI is the wrong place to first hear about your npm dependencies
Leo
Leo
Leo
Follow
Jun 29
CI is the wrong place to first hear about your npm dependencies
#
supplychain
#
shiftleft
#
node
#
npm
Comments
Add Comment
3 min read
These tools provide the engineering substrate required to meet the rigorous safety and economic constraints of production environments.
David C Cavalcante
David C Cavalcante
David C Cavalcante
Follow
Jun 29
These tools provide the engineering substrate required to meet the rigorous safety and economic constraints of production environments.
#
github
#
npm
#
typescript
1
 reaction
Comments
Add Comment
2 min read
Engineering production AI infrastructure requires moving beyond heuristic guesswork toward deterministic, verifiable logic
David C Cavalcante
David C Cavalcante
David C Cavalcante
Follow
Jun 29
Engineering production AI infrastructure requires moving beyond heuristic guesswork toward deterministic, verifiable logic
#
github
#
npm
#
typescript
1
 reaction
Comments
Add Comment
2 min read
ContextVault: Own Your AI Context Across Models, Agents, and Time
Mohammad Ali Abdul Wahed
Mohammad Ali Abdul Wahed
Mohammad Ali Abdul Wahed
Follow
Jun 27
ContextVault: Own Your AI Context Across Models, Agents, and Time
#
ai
#
opensource
#
npm
#
programming
Comments
Add Comment
9 min read
PostCSS Adopted Staged Publishing. 685M Weekly Downloads Now Gated.
Pico
Pico
Pico
Follow
Jun 27
PostCSS Adopted Staged Publishing. 685M Weekly Downloads Now Gated.
#
npm
#
security
#
supplychain
#
javascript
2
 reactions
Comments
1
 comment
2 min read
npm freezes high-impact maintainer accounts for 72 hours after a sensitive change
Leo
Leo
Leo
Follow
Jun 26
npm freezes high-impact maintainer accounts for 72 hours after a sensitive change
#
npm
#
supplychain
#
accounttakeover
#
security
Comments
Add Comment
4 min read
Nation-State Actors Are Now Targeting Your AI Agent's npm Packages
Toni Antunovic
Toni Antunovic
Toni Antunovic
Follow
Jun 25
Nation-State Actors Are Now Targeting Your AI Agent's npm Packages
#
security
#
npm
#
ai
#
devsecops
Comments
Add Comment
6 min read
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account