npm - DEV Community

Skip to content

DEV Community

👋 Sign in for the ability to sort posts by relevant, latest, or top.

kotakanbe

Oct 26

A maintained package can still ship malware. What a health check can and can't see.

#security #opensource #npm #supplychain

11 min read

Msotafa Mohamed

Oct 26

Three bugs my npm packages shipped, and the checks that catch them now

#javascript #npm #nextjs #typescript

3 min read

Marina Kovalchuk

Oct 26

npm Security Advisories Withdrawn for Popular Packages, Questioning Automated Audit Reliability

#security #npm #audits #vulnerabilities

9 min read

Renato Rodrigues

Oct 25

How I automated npm dependency upgrades with an AI skill

#npm #ai #productivity #opensource

6 min read

Oct 25

Bear UI 1.3.5 — charts, AI, code, maps, and kanban now have their own packages

#frontend #javascript #npm #react

3 min read

jeffrey

Oct 24

Two npm Bugs, One Lesson: Upgrading the Runtime Is Not Upgrading the Dependencies

#npm #jwt #pathtraversal #dependencymanagement

4 min read

Oct 24

The fast-jwt fix for algorithm confusion missed the prefix

#jwt #authentication #library #npm

5 min read

Matt Busel

Oct 24

OpenClaw got 591 advisories. 1 in 4 top npm installs is the real hole

#security #npm #opensource #ai

15 min read

relayshieldadmin

Oct 23

Two Worms, One Blind Spot

#malware #supplychain #npm #security

3 min read

Alex

Oct 22

Is this project npm, pnpm, Yarn 1 or Yarn 4? How to tell, and why Yarn is the tricky one

#javascript #node #npm #tooling

4 min read

Oct 20

10 TypeScript files, 5 SDK artefacts: typed in Node and Deno

#typescript #javascript #deno #npm

5 min read

Oct 20

I checked 26 popular Node.js starters. 18 ship a high-severity vulnerability that npm update can't fix

#node #javascript #security #npm

6 min read

Oct 20

Your Coding Agent Added an npm Package. 6 Commands to Vet It Before You Land the Branch

#npm #security #ai #tutorial

8 min read

Oct 20

Securing your pnpm supply chain

#security #node #javascript #npm

2 min read

Oct 19

The Nx Malware Ran Claude Code With --dangerously-skip-permissions. Could It on Yours?

#security #ai #npm #devtools

8 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.