DEV Community

npm

Node Package Manager

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
AI Coding Assistants Invent Fake Packages 1 in 5 Times — Attackers Are Already Registering Them
trustboost profile

AI Coding Assistants Invent Fake Packages 1 in 5 Times — Attackers Are Already Registering Them

#security #ai #webdev #npm
Comments
2 min read
Modern Open-Source Maintenance: Secure Package Publishing, SemVer, and Automated Scanning
mtahir27 profile

Modern Open-Source Maintenance: Secure Package Publishing, SemVer, and Automated Scanning

#opensource #npm #securityscanning #semanticversioning
Comments
9 min read
Your npm install Is Doing More Than You Think
mridudixit15 profile

Your npm install Is Doing More Than You Think

#npm #javascript #programming #productivity
1
Comments 2
7 min read
A Supply-Chain Attack Hit Our Repos. Here's How We Locked Down GitHub So It Can't Happen Again
naum4n profile

A Supply-Chain Attack Hit Our Repos. Here's How We Locked Down GitHub So It Can't Happen Again

#github #devops #security #npm
Comments
3 min read
capsurface: reviewing capability changes in npm dependencies
0xvmartins profile

capsurface: reviewing capability changes in npm dependencies

#security #npm #javascript #node
1
Comments
5 min read
Good News For Backend And Devops Buddy
nahid625 profile

Good News For Backend And Devops Buddy

#backend #devops #npm #devtool
Comments
2 min read
Caching VAT and FX Rates at Build Time, Not on the Request Path
iurii_rogulia profile

Caching VAT and FX Rates at Build Time, Not on the Request Path

#node #typescript #ecb #npm
Comments
8 min read
What a Job Take-Home Taught Me About npm Supply-Chain Attacks
navalsaini27 profile

What a Job Take-Home Taught Me About npm Supply-Chain Attacks

#security #npm #javascript #cybersecurity
Comments 1
3 min read
How I Choose a Library Before Adding It to a Project
sashadudkina5 profile

How I Choose a Library Before Adding It to a Project

#frontend #webdev #beginners #npm
2
Comments
7 min read
Infected by git pull and npm run build — Malware planted in a build config through a forged merge commit
itskill_jp profile

Infected by git pull and npm run build — Malware planted in a build config through a forged merge commit

#security #javascript #npm #github
Comments 1
13 min read
Chron passed 10,000 npm downloads on September 30th. 10,158 as of this morning
sirinivask profile

Chron passed 10,000 npm downloads on September 30th. 10,158 as of this morning

#javascript #node #npm #tools
Comments 2
5 min read
Stop installing 6 security packages for every Node API
hopesf profile

Stop installing 6 security packages for every Node API

#node #npm #javascript #typescript
Comments
1 min read
How npm typosquatting and dependency confusion attacks work (and how to stop them)
rushabh5000 profile

How npm typosquatting and dependency confusion attacks work (and how to stop them)

#javascript #security #node #npm
Comments 1
3 min read
Finding the second copy of React that npm ls cannot see
arthur031221 profile

Finding the second copy of React that npm ls cannot see

#react #javascript #npm #debugging
Comments 6
2 min read
Building Better PDF Workflows in Vue 3 with vue-pdf-export
saurabhzaiswal profile

Building Better PDF Workflows in Vue 3 with vue-pdf-export

#vue #npm #nuxt #typescript
Comments 1
1 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.