DEV Community

npm

Node Package Manager

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Two npm worms shipped with valid provenance this year
booyaka101 profile

Two npm worms shipped with valid provenance this year

#javascript #security #npm #devops
1
Comments
5 min read
responsive-tailwind: The Utility That Refuses To Build Your Class Names
babyreptile profile

responsive-tailwind: The Utility That Refuses To Build Your Class Names

#webdev #tailwindcss #react #npm
Comments
6 min read
The GITHUB_TOKEN in Your .zshrc Is a Time Bomb (And So Is Your .npmrc)
david_shibley profile

The GITHUB_TOKEN in Your .zshrc Is a Time Bomb (And So Is Your .npmrc)

#security #npm #cli #productivity
Comments
5 min read
When ‘Are We Affected?’ Requires Reconstructing Yesterday’s npm Install
demivalerith profile

When ‘Are We Affected?’ Requires Reconstructing Yesterday’s npm Install

#security #javascript #devops #npm
1
Comments
3 min read
pnpm wins in monorepos, npm wins on zero friction
jtorchia profile

pnpm wins in monorepos, npm wins on zero friction

#english #nextjs #pnpm #npm
1
Comments
7 min read
Keyv and Cacheable npm Supply Chain Compromise
informertech profile

Keyv and Cacheable npm Supply Chain Compromise

#cybersecurity #webdev #npm
Comments
7 min read
⚠️ Shai-Hulud opens your IDE: the npm worm that beats --ignore-scripts
kenimo49 profile

⚠️ Shai-Hulud opens your IDE: the npm worm that beats --ignore-scripts

#security #npm #javascript #devsecops
2
Comments
6 min read
I Built PkgDiet — A CLI to Clean Up Your npm Dependencies 🥗
omtajne profile

I Built PkgDiet — A CLI to Clean Up Your npm Dependencies 🥗

#javascript #npm #node #opensource
1
Comments
1 min read
The npm `overrides` Snippet Everyone Copy-Pastes — And What It Actually Does
mayank7924 profile

The npm `overrides` Snippet Everyone Copy-Pastes — And What It Actually Does

#javascript #npm #nodejs #react
1
Comments
4 min read
🚀 SuriLens: An Open-Source Real-Time Backend Execution Visualizer for Node.js
sonisuryansh profile

🚀 SuriLens: An Open-Source Real-Time Backend Execution Visualizer for Node.js

#node #javascript #opensource #npm
Comments
2 min read
npm walls off 2FA-bypass tokens from account and package management
leobaniak profile
Leo

npm walls off 2FA-bypass tokens from account and package management

#npm #supplychainsecurity #2fa #accesstokens
Comments
3 min read
The Streak Continues: Four More Supply Chain Attacks Hit npm and PyPI
dwayne_mcdaniel profile

The Streak Continues: Four More Supply Chain Attacks Hit npm and PyPI

#security #supplychain #npm #python
Comments
7 min read
How I Published My First npm Packages
sandeep_prajapati_8eff0f1 profile

How I Published My First npm Packages

#javascript #npm #learning #productivity
1
Comments
5 min read
Protect your application from npm supply chain attacks with tinyNpm!
about14sheep profile

Protect your application from npm supply chain attacks with tinyNpm!

#node #npm #security #vscode
6
Comments
1 min read
About Modules...
gmcjr profile

About Modules...

#node #npm #modules #webdev
Comments
3 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.