npm - DEV Community

Skip to content

DEV Community

👋 Sign in for the ability to sort posts by relevant, latest, or top.

uehara

Nov 11

Checking the parts you depend on: libraries and packages

#security #npm #vulnerability #dependencies

19 min read

Versyka

Nov 10

chalk and debug shipped malware for a few hours. Waiting 7 days would have skipped it.

#security #npm #devops #javascript

2 min read

Mohsen Fallahnejad

Nov 10

Bun vs npm, Yarn, Vite and Webpack: Who Does What in a JavaScript Kitchen

#bunjs #npm #yarn #vite

5 min read

Muhammad Ali Mughal

Nov 10

Extension & npm Postinstall Forensics: Homoglyphs, Base64 & Unexpected Network

#security #npm #javascript #webdev

8 min read

AheadKit

Nov 10

npm install Took 37 Seconds Cold and 1.5 Warm. I Timed It 6 Times.

#npm #javascript #programming #performance

4 min read

Ulk0r0

Nov 9

The file your agent reads before you — a poisoned AGENTS.md, dissected

#security #ai #npm #infosec

4 min read

Iain

Nov 9

jsDelivr handed out the hijacked axios 940,000 times

#javascript #opensource #security #npm

5 min read

Luisa Lima

Nov 9

Ask before you install

#security #ai #npm #javascript

7 min read

inclinq_Founder

Nov 9

A Verified Build Pipeline Published Malware. Here's What Failed.

#security #npm #javascript #devops

4 min read

Nov 9

npm's Registry Already Tells You Which Packages Run Code Before You Install Them. PyPI's Doesn't.

#discuss #programming #security #npm

9 min read

Nov 9

We fixed our label client in 0.0.15 and npm update kept every service on 0.0.14

#sergeyshinder #npm #semver #release

2 min read

Jahongir Sobirov

Nov 8

auth-verify: JWT, OTP, Passkeys and More in One Node.js Library

#node #javascript #security #npm

3 min read

Iain

Nov 7

npm's worms ride a few big accounts, not your dependencies

#javascript #opensource #security #npm

6 min read

Nov 8

Make Your Coding Agent Wait 7 Days for New Packages: npm, pnpm, Yarn, Bun and uv

#security #npm #python #tutorial

9 min read

Versyka

Nov 7

0.2.3 doesn't mean what you think: npm's caret below 1.0

#webdev #javascript #npm #node

2 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.