DEV Community

npm

Node Package Manager

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
What Actually Happens When You Run `npm install`

What Actually Happens When You Run `npm install`

Comments
5 min read
How npm typosquatting and dependency confusion attacks work (and how to stop them)

How npm typosquatting and dependency confusion attacks work (and how to stop them)

Comments 1
3 min read
I Built a Website Crawler Because “It Works in the Browser” Isn’t Enough

I Built a Website Crawler Because “It Works in the Browser” Isn’t Enough

Comments 2
4 min read
Why npm & pnpm audit miss vulnerabilities

Why npm & pnpm audit miss vulnerabilities

Comments
3 min read
You Cannot Tell It Does Not Ship Until You Ship It

You Cannot Tell It Does Not Ship Until You Ship It

Comments
4 min read
18 malicious npm packages are still remote-controlling AI coding agents (verified today)

18 malicious npm packages are still remote-controlling AI coding agents (verified today)

Comments
7 min read
Three things that surprised me shipping a 200-line npm package

Three things that surprised me shipping a 200-line npm package

2
Comments
4 min read
🤖 8 Agent Skills y mi primer servidor MCP publicado en npm

🤖 8 Agent Skills y mi primer servidor MCP publicado en npm

Comments
7 min read
🤖 8 Agent Skills and my first MCP server published to npm

🤖 8 Agent Skills and my first MCP server published to npm

Comments
6 min read
Validate Card Brands in Node.js with Luhn and credit-card-brand-detector

Validate Card Brands in Node.js with Luhn and credit-card-brand-detector

Comments
5 min read
Mini Shai-Hulud's Latest Wave: 280 New Places It Hunts for Your Secrets

Mini Shai-Hulud's Latest Wave: 280 New Places It Hunts for Your Secrets

Comments 1
4 min read
ng update: Because Peace Was Never an Option 😂

ng update: Because Peace Was Never an Option 😂

3
Comments 1
1 min read
Built a User-Agent Parser for Kotlin Multiplatform

Built a User-Agent Parser for Kotlin Multiplatform

Comments 1
5 min read
Your OpenSearch aggregation is lying to you: it returns 200 OK

Your OpenSearch aggregation is lying to you: it returns 200 OK

Comments
8 min read
I Published 3 MCP Servers in One Day. Here's What Actually Broke.

I Published 3 MCP Servers in One Day. Here's What Actually Broke.

1
Comments
6 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.