DEV Community

npm

Node Package Manager

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
MemTensor: When an AI Memory Plugin Becomes the Credential Collector
bianliang profile

MemTensor: When an AI Memory Plugin Becomes the Credential Collector

#supplychain #npm #pypi #aiagents
Comments
2 min read
The npm Worm Era: Why Package Signatures Did Not Stop Shai-Hulud
onaeiuspkz profile

The npm Worm Era: Why Package Signatures Did Not Stop Shai-Hulud

#supplychain #npm #cicd #secrets
Comments
3 min read
I made string-range-tokens (srTokens) — here’s what to use it for
figsh profile

I made string-range-tokens (srTokens) — here’s what to use it for

#javascript #typescript #npm #opensource
Comments
4 min read
Fix: @prisma/client did not initialize yet (Prisma 6 and 7)
nils44344 profile

Fix: @prisma/client did not initialize yet (Prisma 6 and 7)

#prisma #npm #node #database
Comments
5 min read
I checked 2,905 npm packages with 1M+ weekly downloads. 887 haven't shipped a release in over a year.
pennyforgehq profile

I checked 2,905 npm packages with 1M+ weekly downloads. 887 haven't shipped a release in over a year.

#javascript #npm #data #security
Comments
6 min read
Auto-allow npm scripts in Claude Code without allowing npm install
aicoding-guide profile

Auto-allow npm scripts in Claude Code without allowing npm install

#claudecode #permissions #npm #pnpm
Comments 1
3 min read
Publishing SDKs to npm, PyPI, Maven Central and the rest
octri profile
Octri

Publishing SDKs to npm, PyPI, Maven Central and the rest

#api #npm #programming #openapi
Comments
4 min read
Next.js 16.3 vulnerabilities: which version is patched?
nils44344 profile

Next.js 16.3 vulnerabilities: which version is patched?

#nextjs #security #npm #webdev
Comments
5 min read
Shai-Hulud Just Infected an AI Agent Platform's npm Package — What Self-Hosted n8n Builders Must Do Now
cortexflow_tech profile

Shai-Hulud Just Infected an AI Agent Platform's npm Package — What Self-Hosted n8n Builders Must Do Now

#n8n #supplychain #security #npm
Comments
7 min read
The Proactive Shift: How npm's Scan-and-Prevent Model is Securing Your Software Supply Chain
devactivity profile
Oleg

The Proactive Shift: How npm's Scan-and-Prevent Model is Securing Your Software Supply Chain

#npm #security #supplychain #opensource
Comments
5 min read
CVE-2026-6951 — Bypassing simple-git's Blocklist via the --config Flag (RCE Analysis)
guidance_white profile

CVE-2026-6951 — Bypassing simple-git's Blocklist via the --config Flag (RCE Analysis)

#node #npm #cybersecurity #security
Comments
7 min read
prisma generate not working: "No command registered" (Prisma 8)
nils44344 profile

prisma generate not working: "No command registered" (Prisma 8)

#prisma #npm #node #database
Comments
5 min read
ChainDrop Had Valid Provenance. That Was Not Enough.
relayshield profile

ChainDrop Had Valid Provenance. That Was Not Enough.

#supplychain #security #npm #opensource
Comments 1
2 min read
Package of the Week: fast-equals scores 95/100, and the one thing dragging it down isn't what you'd guess
marcelo_pr profile

Package of the Week: fast-equals scores 95/100, and the one thing dragging it down isn't what you'd guess

#javascript #opensource #security #npm
Comments
1 min read
Your NPM_TOKEN stops publishing in January 2027. Here's the one-command migration
markalex1234 profile
Markus

Your NPM_TOKEN stops publishing in January 2027. Here's the one-command migration

#npm #githubactions #security #javascript
Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.