DEV Community

npm

Node Package Manager

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
npm Supply-Chain Attacks: What the Chalk and Shai-Hulud Incidents Mean for Your App

npm Supply-Chain Attacks: What the Chalk and Shai-Hulud Incidents Mean for Your App

Comments
5 min read
I Publish npm Packages With No Tokens Stored Anywhere — Here's the Setup

I Publish npm Packages With No Tokens Stored Anywhere — Here's the Setup

Comments
4 min read
Introducing @zervonex/baileys - A Tailored Fork of the Baileys WhatsApp Web API

Introducing @zervonex/baileys - A Tailored Fork of the Baileys WhatsApp Web API

Comments
2 min read
Check that a package exists before your AI agent installs it

Check that a package exists before your AI agent installs it

Comments
2 min read
Dangerous package 'imgdecode' downloaded 979 times from npm library

Dangerous package 'imgdecode' downloaded 979 times from npm library

Comments
2 min read
Before You npx an MCP Server: 8 Checks That Would Have Caught the Fake REA Repo

Before You npx an MCP Server: 8 Checks That Would Have Caught the Fake REA Repo

Comments
10 min read
74 minutes before the advisory: graph triage for npm account hijacks

74 minutes before the advisory: graph triage for npm account hijacks

Comments
9 min read
The Tensorlake Worm Commits a .claude Folder So It Runs Again When You Open Claude Code

The Tensorlake Worm Commits a .claude Folder So It Runs Again When You Open Claude Code

Comments
10 min read
I Ran `npm fund` and Found 47 Packages Keeping My App Alive

I Ran `npm fund` and Found 47 Packages Keeping My App Alive

Comments
3 min read
Glitchpack

Glitchpack

1
Comments
1 min read
How to Validate Sri Lankan NIC Numbers, Phone Numbers, and LKR Amounts.

How to Validate Sri Lankan NIC Numbers, Phone Numbers, and LKR Amounts.

Comments
9 min read
I gave my coding agents a supply-chain tripwire (and a radar)

I gave my coding agents a supply-chain tripwire (and a radar)

Comments
3 min read
Typosquatting and Slopsquatting: Defending the Package Install Path

Typosquatting and Slopsquatting: Defending the Package Install Path

Comments
4 min read
New stricter rules from GitHub for code packages after security investigation

New stricter rules from GitHub for code packages after security investigation

Comments
2 min read
Your package.json Says What You Asked For. Only the Lockfile Says What You Got.

Your package.json Says What You Asked For. Only the Lockfile Says What You Got.

Comments
3 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.