Skip to content

Forem

npm

Node Package Manager

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Cover image for Setting GitHub as a trusted publisher for npm

Apr 13

Setting GitHub as a trusted publisher for npm

#webdev #node #npm #github

2 min read

Marina Kovalchuk

Apr 8

Malicious `axios@1.14.1` Published: Exfiltrated CI/CD Secrets; Pin Dependency Versions to Mitigate

#security #npm #axios #cicd

12 min read

Apr 7

npm Publish Without Tokens

#cicd #github #npm #security

3 min read

Bill Tu

Apr 7

Debugging Node.js in Docker and Kubernetes Without Restarting

#javascript #node #npm

6 min read

Apr 7

Building a Reusable React Knowledge Graph Component: OKVE v0.3.0

#opensource #react #npm

1 min read

Bill Tu

Apr 7

7 Bugs That Taught Us How to Build Better Diagnostic Tools

#javascript #node #npm

8 min read

Bill Tu

Apr 7

Beyond the Event Loop: Tracking Slow I/O in Production Node.js

#javascript #npm #node

8 min read

Apr 7

Validando CNPJ de forma definitiva: Conheça a cnpj-universal (JS/TS)

#javascript #typescript #nestjs #npm

2 min read

Apr 6

The Axios Supply Chain Attack Explained — npm's Biggest Security Breach in 2026

#security #javascript #npm #supplychainattack

16 min read

Cover image for 20 one-shot prompts that turn Kanban into an autonomous coding machine

Tony Loehr

Apr 6

20 one-shot prompts that turn Kanban into an autonomous coding machine

#ai #automation #community #npm

11 min read

Pico

Apr 6

Paste your package.json, see which dependencies are CRITICAL supply chain risks

#security #npm #supplychain #devtools

2 min read

Cover image for Axios Was Compromised. Here's What It Means for Your Repo.

Joseph Yeo

Apr 6

Axios Was Compromised. Here's What It Means for Your Repo.

#security #npm #supplychain #opensource

3 min read

Pico

Apr 5

npm package commitment scores: zod has 139M weekly downloads and one maintainer

#security #npm #opensource #webdev

4 min read

Pico

Apr 5

I audited 10 common npm packages. Three came back CRITICAL. One was just attacked last week.

#npm #security #supplychain #mcp

3 min read

Apr 6

The Axios Attack Proved npm audit Is Broken. Here's What Would Have Caught It

#npm #security #javascript #opensource

6 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.