Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
npm
Node Package Manager
Follow
Hide
Posts
Left menu
👋
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
Two npm Bugs, One Lesson: Upgrading the Runtime Is Not Upgrading the Dependencies
jeffrey
jeffrey
jeffrey
Follow
Oct 24
Two npm Bugs, One Lesson: Upgrading the Runtime Is Not Upgrading the Dependencies
#
npm
#
jwt
#
pathtraversal
#
dependencymanagement
Comments
1
comment
4 min read
The fast-jwt fix for algorithm confusion missed the prefix
Ioneyrezende
Ioneyrezende
Ioneyrezende
Follow
Oct 24
The fast-jwt fix for algorithm confusion missed the prefix
#
jwt
#
authentication
#
library
#
npm
Comments
Add Comment
5 min read
OpenClaw got 591 advisories. 1 in 4 top npm installs is the real hole
Matt Busel
Matt Busel
Matt Busel
Follow
Oct 24
OpenClaw got 591 advisories. 1 in 4 top npm installs is the real hole
#
security
#
npm
#
opensource
#
ai
Comments
Add Comment
15 min read
Two Worms, One Blind Spot
relayshieldadmin
relayshieldadmin
relayshieldadmin
Follow
Oct 23
Two Worms, One Blind Spot
#
malware
#
supplychain
#
npm
#
security
Comments
Add Comment
3 min read
How npm worms steal your credentials, and the order to rotate them in
quietkernel
quietkernel
quietkernel
Follow
Oct 22
How npm worms steal your credentials, and the order to rotate them in
#
security
#
npm
#
node
#
devops
Comments
1
comment
7 min read
Is this project npm, pnpm, Yarn 1 or Yarn 4? How to tell, and why Yarn is the tricky one
Alex
Alex
Alex
Follow
Oct 22
Is this project npm, pnpm, Yarn 1 or Yarn 4? How to tell, and why Yarn is the tricky one
#
javascript
#
node
#
npm
#
tooling
Comments
Add Comment
4 min read
10 TypeScript files, 5 SDK artefacts: typed in Node and Deno
Panth Patel
Panth Patel
Panth Patel
Follow
Oct 20
10 TypeScript files, 5 SDK artefacts: typed in Node and Deno
#
typescript
#
javascript
#
deno
#
npm
Comments
Add Comment
5 min read
I checked 26 popular Node.js starters. 18 ship a high-severity vulnerability that npm update can't fix
Marius Bancos
Marius Bancos
Marius Bancos
Follow
Oct 20
I checked 26 popular Node.js starters. 18 ship a high-severity vulnerability that npm update can't fix
#
node
#
javascript
#
security
#
npm
Comments
Add Comment
6 min read
Your Coding Agent Added an npm Package. 6 Commands to Vet It Before You Land the Branch
Gabriel Anhaia
Gabriel Anhaia
Gabriel Anhaia
Follow
Oct 20
Your Coding Agent Added an npm Package. 6 Commands to Vet It Before You Land the Branch
#
npm
#
security
#
ai
#
tutorial
1
reaction
Comments
Add Comment
8 min read
Securing your pnpm supply chain
Léo Pradel
Léo Pradel
Léo Pradel
Follow
Oct 20
Securing your pnpm supply chain
#
security
#
node
#
javascript
#
npm
Comments
Add Comment
2 min read
The Nx Malware Ran Claude Code With --dangerously-skip-permissions. Could It on Yours?
Gabriel Anhaia
Gabriel Anhaia
Gabriel Anhaia
Follow
Oct 19
The Nx Malware Ran Claude Code With --dangerously-skip-permissions. Could It on Yours?
#
security
#
ai
#
npm
#
devtools
Comments
Add Comment
8 min read
The 60-Second Check Before Every npm install
Khushi Trivedi
Khushi Trivedi
Khushi Trivedi
Follow
Oct 19
The 60-Second Check Before Every npm install
#
typosquatting
#
cybersecurity
#
npm
#
containersecurity
Comments
Add Comment
4 min read
When npmjs is flaky in China: switch to a team registry with PROXY cache
Wen Ping
Wen Ping
Wen Ping
Follow
Oct 19
When npmjs is flaky in China: switch to a team registry with PROXY cache
#
angusrepo
#
npmjs
#
npm
Comments
Add Comment
5 min read
Start a free cloud npm private registry: from publish to public distribution
Wen Ping
Wen Ping
Wen Ping
Follow
Oct 19
Start a free cloud npm private registry: from publish to public distribution
#
angusrepo
#
npm
Comments
Add Comment
6 min read
I Found a Fourth Package Registry My Sandbox Could Reach. It Checksums Every File, Not Just the Tarball.
Noble Ronin
Noble Ronin
Noble Ronin
Follow
Oct 19
I Found a Fourth Package Registry My Sandbox Could Reach. It Checksums Every File, Not Just the Tarball.
#
discuss
#
programming
#
security
#
npm
Comments
Add Comment
6 min read
👋
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account