Skip to content

Forem

npm

Node Package Manager

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Pico

Apr 5

npm package commitment scores: zod has 139M weekly downloads and one maintainer

#security #npm #opensource #webdev

4 min read

Pico

Apr 5

I audited 10 common npm packages. Three came back CRITICAL. One was just attacked last week.

#npm #security #supplychain #mcp

3 min read

Apr 6

The Axios Attack Proved npm audit Is Broken. Here's What Would Have Caught It

#npm #security #javascript #opensource

6 min read

Apr 4

The Documentation Attack Surface: How npm Libraries Teach Insecure Patterns

#security #javascript #npm #webdev

4 min read

Cover image for I built Material Symbols SVG, an icon library for using Material Symbols as SVG components

k-s-h-r

Apr 4

I built Material Symbols SVG, an icon library for using Material Symbols as SVG components

#react #npm #typescript #frontend

5 min read

Apr 4

Why Your AI Coding Agent Keeps Recommending Dead Packages

#agents #ai #npm #programming

2 min read

May 8

I never expected this response ~robot-toast

#javascript #webdev #opensource #npm

2 min read

Artyom Kornilov

Apr 4

Malicious npm Packages Disguised as Strapi Plugins Enable Data Exfiltration and Remote Code Execution

#npm #strapi #malware #exfiltration

7 min read

Cover image for Supply Chain Security measures

0xkoji

Apr 3

Supply Chain Security measures

#security #npm #uv #githubactions

1 min read

Cover image for Shipping a Go CLI to Every Ecosystem: GitHub Releases, Homebrew, and npm

Kazu

Apr 14

Shipping a Go CLI to Every Ecosystem: GitHub Releases, Homebrew, and npm

#cli #github #go #npm

5 min read

Cover image for npm audit isn't enough: I simulated a supply chain attack on my Node dependencies and found what the scanner can't see

May 7

npm audit isn't enough: I simulated a supply chain attack on my Node dependencies and found what the scanner can't see

#english #typescript #npm #devops

9 min read

Cover image for npm audit no alcanza: simulé un supply chain attack sobre mis dependencias de Node y encontré lo que el scanner no ve

May 7

npm audit no alcanza: simulé un supply chain attack sobre mis dependencias de Node y encontré lo que el scanner no ve

#spanish #espanol #typescript #npm

10 min read

Apr 4

The Axios/npm Incident & Why AI Won’t Replace Devs

#ai #javascript #npm #security

1 min read

Apr 3

I built an npm malware scanner and found 21 malicious packages in 24 hours

#security #npm #javascript #opensource

1 min read

bigjenkie

Apr 3

How the axios@1.14.1 supply chain attack worked (and how to protect yourself)

#javascript #opensource #security #npm

4 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.