Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
npm
Node Package Manager
Follow
Hide
Posts
Left menu
👋
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
Dependabot's 3-Day Cooldown: Why Waiting Is Now Safer
Induwara Ashinsana
Induwara Ashinsana
Induwara Ashinsana
Follow
Jul 24
Dependabot's 3-Day Cooldown: Why Waiting Is Now Safer
#
supplychainsecurity
#
dependabot
#
npm
Comments
Add Comment
4 min read
A Typosquat Package Almost Got My Keys: Dissecting the Attack Safely
Pavel Espitia
Pavel Espitia
Pavel Espitia
Follow
Jul 25
A Typosquat Package Almost Got My Keys: Dissecting the Attack Safely
#
security
#
npm
#
node
#
webdev
1
reaction
Comments
Add Comment
5 min read
The npm worm that shipped with valid SLSA provenance
Leo
Leo
Leo
Follow
Jul 22
The npm worm that shipped with valid SLSA provenance
#
supplychainsecurity
#
slsa
#
provenance
#
npm
Comments
Add Comment
4 min read
I built a Khmer Hybrid Calendar package for JavaScript/TypeScript
Heng LOEM
Heng LOEM
Heng LOEM
Follow
Jul 17
I built a Khmer Hybrid Calendar package for JavaScript/TypeScript
#
npm
#
programming
#
webdev
2
reactions
Comments
Add Comment
1 min read
Simplifying Authorization in NestJS: A New Approach
Midhun G S
Midhun G S
Midhun G S
Follow
Jul 16
Simplifying Authorization in NestJS: A New Approach
#
nestjs
#
security
#
npm
#
webdev
Comments
Add Comment
2 min read
OIDC Authentication Succeeded, but npm Publish Returned 404 — Here’s What Happened
0xkoji
0xkoji
0xkoji
Follow
Jul 21
OIDC Authentication Succeeded, but npm Publish Returned 404 — Here’s What Happened
#
github
#
npm
2
reactions
Comments
Add Comment
2 min read
They Asked for My AI Rules. But I Could Not Just Hand Them Over.
Jeel Vankhede
Jeel Vankhede
Jeel Vankhede
Follow
Jul 13
They Asked for My AI Rules. But I Could Not Just Hand Them Over.
#
workflow
#
npm
#
cli
#
aitools
1
reaction
Comments
Add Comment
4 min read
nvm loses your global CLIs every time you switch. So I fixed it.
Alex Kolovskiy
Alex Kolovskiy
Alex Kolovskiy
Follow
Jul 14
nvm loses your global CLIs every time you switch. So I fixed it.
#
webdev
#
javascript
#
programming
#
npm
1
reaction
Comments
Add Comment
5 min read
gitlawb-zero Heads to 0.4.0 With a Native npm Binary and Tighter Sandbox
TerminalBlog
TerminalBlog
TerminalBlog
Follow
Jul 11
gitlawb-zero Heads to 0.4.0 With a Native npm Binary and Tighter Sandbox
#
release
#
gitlawbzero
#
sandbox
#
npm
Comments
Add Comment
2 min read
We Open-Sourced 42 Construction Calculators — Here's Why
lsj
lsj
lsj
Follow
Jul 14
We Open-Sourced 42 Construction Calculators — Here's Why
#
opensource
#
react
#
typescript
#
npm
3
reactions
Comments
Add Comment
1 min read
npm v12 flips install-time to closed-by-default
Leo
Leo
Leo
Follow
Jul 9
npm v12 flips install-time to closed-by-default
#
npm
#
supplychain
#
security
#
2fa
Comments
Add Comment
3 min read
PolinRider keeps expanding, and the postinstall still lands on your runner
Leo
Leo
Leo
Follow
Jul 8
PolinRider keeps expanding, and the postinstall still lands on your runner
#
supplychain
#
security
#
npm
#
maliciouspackages
Comments
Add Comment
3 min read
npm v12 stopped running install scripts. Which ones do you approve? A real audit walkthrough
Christo
Christo
Christo
Follow
Jul 21
npm v12 stopped running install scripts. Which ones do you approve? A real audit walkthrough
#
npm
#
security
#
javascript
#
node
1
reaction
Comments
3
comments
4 min read
I Built the Vue 3 Japanese Postal Code Library That Didn't Exist
Thiyagu Arunachalam
Thiyagu Arunachalam
Thiyagu Arunachalam
Follow
Jul 12
I Built the Vue 3 Japanese Postal Code Library That Didn't Exist
#
webdev
#
vue
#
typescript
#
npm
5
reactions
Comments
1
comment
3 min read
MCP supply chain attacks are coming — here's how to prepare
Edison Flores
Edison Flores
Edison Flores
Follow
Jul 7
MCP supply chain attacks are coming — here's how to prepare
#
mcp
#
security
#
supplychain
#
npm
Comments
Add Comment
2 min read
👋
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account