Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
npm
Follow
Hide
Node Package Manager
Posts
Left menu
👋
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
How to Protect JavaScript Projects Against Supply Chain Attacks
Rodrigo Oler
Rodrigo Oler
Rodrigo Oler
Follow
Mar 31
How to Protect JavaScript Projects Against Supply Chain Attacks
#
security
#
javascript
#
npm
#
devops
Comments
Add Comment
2 min read
Made a new software: BetterYoutube Desktop!
pixelated
pixelated
pixelated
Follow
Apr 1
Made a new software: BetterYoutube Desktop!
#
electron
#
npm
#
webdev
#
opensource
2
reactions
Comments
Add Comment
1 min read
One security alert changed how I think about dependencies
Siti Aisyah Mat Zainal
Siti Aisyah Mat Zainal
Siti Aisyah Mat Zainal
Follow
Apr 1
One security alert changed how I think about dependencies
#
javascript
#
npm
#
security
#
webdev
1
reaction
Comments
Add Comment
2 min read
Your npm Package Is Leaking Source Code (And You Probably Don't Know It)
Alan West
Alan West
Alan West
Follow
Apr 1
Your npm Package Is Leaking Source Code (And You Probably Don't Know It)
#
npm
#
javascript
#
security
#
typescript
Comments
Add Comment
4 min read
Every backend developer has this headache 😩
Poojan Dave
Poojan Dave
Poojan Dave
Follow
Mar 29
Every backend developer has this headache 😩
#
node
#
systemdesign
#
opensource
#
npm
Comments
Add Comment
2 min read
كيفية عمل هجوم سلسلة التوريد Axios NPM (وكيفية حماية مشاريع API الخاصة بك)
Yusuf Khalidd
Yusuf Khalidd
Yusuf Khalidd
Follow
Apr 1
كيفية عمل هجوم سلسلة التوريد Axios NPM (وكيفية حماية مشاريع API الخاصة بك)
#
api
#
javascript
#
npm
#
security
Comments
Add Comment
3 min read
Building an MCP Calculator Server: From Zero to 100 Downloads/Week
Yonatan Naor
Yonatan Naor
Yonatan Naor
Follow
Mar 30
Building an MCP Calculator Server: From Zero to 100 Downloads/Week
#
mcp
#
ai
#
npm
#
claudeai
1
reaction
Comments
Add Comment
3 min read
Axios was compromised for 3 hours - how to find it in your running Kubernetes clusters
TooFastTooCurious
TooFastTooCurious
TooFastTooCurious
Follow
Mar 31
Axios was compromised for 3 hours - how to find it in your running Kubernetes clusters
#
security
#
kubernetes
#
npm
#
supplychain
Comments
Add Comment
5 min read
Claude Code Leak: Lessons in npm Security, TypeScript Analysis, and AI Tool Architecture
Max
Max
Max
Follow
Mar 31
Claude Code Leak: Lessons in npm Security, TypeScript Analysis, and AI Tool Architecture
#
security
#
npm
#
typescript
#
ai
1
reaction
Comments
Add Comment
9 min read
npm run dev vs npm start: The Difference That Breaks Your App in Production
Hardik Agarwal
Hardik Agarwal
Hardik Agarwal
Follow
Mar 30
npm run dev vs npm start: The Difference That Breaks Your App in Production
#
node
#
npm
#
nodemon
Comments
Add Comment
3 min read
genkode — Random ID & String Generator for Node.js
Sammit Pal
Sammit Pal
Sammit Pal
Follow
Mar 29
genkode — Random ID & String Generator for Node.js
#
node
#
typescript
#
npm
#
opensource
Comments
Add Comment
4 min read
The Axios npm Supply Chain Attack (March 2026): A 2-Second Breach Window That Compromised the JavaScript Ecosystem
Yug Jadvani
Yug Jadvani
Yug Jadvani
Follow
Apr 2
The Axios npm Supply Chain Attack (March 2026): A 2-Second Breach Window That Compromised the JavaScript Ecosystem
#
javascript
#
npm
#
programming
#
softwareengineering
5
reactions
Comments
Add Comment
5 min read
I got tired of guessing semver bumps in PRs, so I built a tool
kyungseopk1m
kyungseopk1m
kyungseopk1m
Follow
Apr 11
I got tired of guessing semver bumps in PRs, so I built a tool
#
typescript
#
opensource
#
npm
#
node
1
reaction
Comments
Add Comment
2 min read
I Built an npm Package That Makes Every Function Fail — With Inspirational Quotes and Enterprise-Grade Error Boxes 🫖
mamoor123
mamoor123
mamoor123
Follow
Apr 10
I Built an npm Package That Makes Every Function Fail — With Inspirational Quotes and Enterprise-Grade Error Boxes 🫖
#
showdev
#
devchallenge
#
javascript
#
npm
1
reaction
Comments
Add Comment
4 min read
[Axios Hacked] How .npmrc Can Protect Your Node.js Projects from Supply Chain Attacks??
0x41414141
0x41414141
0x41414141
Follow
Apr 1
[Axios Hacked] How .npmrc Can Protect Your Node.js Projects from Supply Chain Attacks??
#
discuss
#
npm
#
ai
#
webdev
6
reactions
Comments
2
comments
2 min read
👋
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account