DEV Community

npm

Node Package Manager

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
auth-verify: JWT, OTP, Passkeys and More in One Node.js Library
jahongir2007 profile

auth-verify: JWT, OTP, Passkeys and More in One Node.js Library

#node #javascript #security #npm
1
Comments
3 min read
The skill that phones home — a poisoned SKILL.md, dissected line by line
ulk0r0 profile
Ulk0r0

The skill that phones home — a poisoned SKILL.md, dissected line by line

#security #ai #npm #infosec
Comments
4 min read
npm's worms ride a few big accounts, not your dependencies
notaflightrisk profile
Iain

npm's worms ride a few big accounts, not your dependencies

#javascript #opensource #security #npm
Comments
6 min read
0.2.3 doesn't mean what you think: npm's caret below 1.0
getversyka profile

0.2.3 doesn't mean what you think: npm's caret below 1.0

#webdev #javascript #npm #node
Comments
2 min read
I got 140 downloads on day one. Then I found out who they were.
yevheniidev profile

I got 140 downloads on day one. Then I found out who they were.

#npm #javascript #opensource #webdev
Comments
2 min read
I scanned 35 real SKILL.md files — 16 tripped a rule, 10 of them Anthropic's official skills
ulk0r0 profile
Ulk0r0

I scanned 35 real SKILL.md files — 16 tripped a rule, 10 of them Anthropic's official skills

#security #ai #infosec #npm
Comments
3 min read
Limitcast weekly update, Nov 6: safer trimming and clearer results
samstull9007 profile

Limitcast weekly update, Nov 6: safer trimming and clearer results

#github #javascript #node #npm
Comments
2 min read
Your agent installed a deprecated MCP server. Here is a pre-install gate that stops it.
dekita profile
Dekita

Your agent installed a deprecated MCP server. Here is a pre-install gate that stops it.

#ai #security #npm #mcp
2
Comments 2
7 min read
Token Accounting for Autonomous Agents: 4 Open-Source Tools I Shipped
orion_80847a074ab3d75d2d0 profile
ORION

Token Accounting for Autonomous Agents: 4 Open-Source Tools I Shipped

#ai #opensource #npm #devtools
Comments
1 min read
An advisory published that afternoon blocked our hotfix and every rollback we could build
sergey_shinder_ab2d943365 profile

An advisory published that afternoon blocked our hotfix and every rollback we could build

#sergeyshinder #cicd #npm #security
1
Comments 1
2 min read
npm packages, types, and the quick-fix install
jslab profile
JSLab

npm packages, types, and the quick-fix install

#showdev #npm #javascript #typescript
Comments
2 min read
Hate changing your design to fit each platform? It can and should be the other way around.
fores profile
Fores

Hate changing your design to fit each platform? It can and should be the other way around.

#mobile #opensource #reactnative #npm
Comments
1 min read
spain-holidays: all 2027 public holidays of Spain, per region, as an npm package
rb9744 profile
RB9744

spain-holidays: all 2027 public holidays of Spain, per region, as an npm package

#javascript #npm #opensource #dataset
Comments
2 min read
A Practical Hunt Workflow for Malicious npm Packages and Their Infrastructure
facilishz profile

A Practical Hunt Workflow for Malicious npm Packages and Their Infrastructure

#cybersecurity #npm #supplychain #zoomeye
Comments
3 min read
Reporting AI Supply-Chain Risk With Evidence Levels, Not Inflation
sorrelthorncroft profile

Reporting AI Supply-Chain Risk With Evidence Levels, Not Inflation

#cybersecurity #npm #supplychain #zoomeye
Comments
3 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.