DEV Community

npm

Node Package Manager

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
chalk and debug shipped malware for a few hours. Waiting 7 days would have skipped it.
getversyka profile

chalk and debug shipped malware for a few hours. Waiting 7 days would have skipped it.

#security #npm #devops #javascript
Comments
2 min read
Bun vs npm, Yarn, Vite and Webpack: Who Does What in a JavaScript Kitchen
mohsenfallahnjd profile

Bun vs npm, Yarn, Vite and Webpack: Who Does What in a JavaScript Kitchen

#bunjs #npm #yarn #vite
Comments
5 min read
I benchmarked my malware scanner against GuardDog on 15 fresh samples of npm and PyPI malware. Here is every result, including the losses.
thihodev profile

I benchmarked my malware scanner against GuardDog on 15 fresh samples of npm and PyPI malware. Here is every result, including the losses.

#security #npm #python #opensource
2
Comments 3
6 min read
npm install Took 37 Seconds Cold and 1.5 Warm. I Timed It 6 Times.
aheadkit profile

npm install Took 37 Seconds Cold and 1.5 Warm. I Timed It 6 Times.

#npm #javascript #programming #performance
1
Comments
4 min read
The file your agent reads before you — a poisoned AGENTS.md, dissected
ulk0r0 profile
Ulk0r0

The file your agent reads before you — a poisoned AGENTS.md, dissected

#security #ai #npm #infosec
Comments 1
4 min read
jsDelivr handed out the hijacked axios 940,000 times
notaflightrisk profile
Iain

jsDelivr handed out the hijacked axios 940,000 times

#javascript #opensource #security #npm
Comments 1
5 min read
Ask before you install
luisalima profile

Ask before you install

#security #ai #npm #javascript
1
Comments 1
7 min read
A Verified Build Pipeline Published Malware. Here's What Failed.
inclinq_founder profile

A Verified Build Pipeline Published Malware. Here's What Failed.

#security #npm #javascript #devops
Comments
4 min read
npm's Registry Already Tells You Which Packages Run Code Before You Install Them. PyPI's Doesn't.
ronin13 profile

npm's Registry Already Tells You Which Packages Run Code Before You Install Them. PyPI's Doesn't.

#discuss #programming #security #npm
Comments
9 min read
We fixed our label client in 0.0.15 and npm update kept every service on 0.0.14
sergey_shinder_ab2d943365 profile

We fixed our label client in 0.0.15 and npm update kept every service on 0.0.14

#sergeyshinder #npm #semver #release
1
Comments
2 min read
auth-verify: JWT, OTP, Passkeys and More in One Node.js Library
jahongir2007 profile

auth-verify: JWT, OTP, Passkeys and More in One Node.js Library

#node #javascript #security #npm
1
Comments
3 min read
npm's worms ride a few big accounts, not your dependencies
notaflightrisk profile
Iain

npm's worms ride a few big accounts, not your dependencies

#javascript #opensource #security #npm
Comments
6 min read
Make Your Coding Agent Wait 7 Days for New Packages: npm, pnpm, Yarn, Bun and uv
gabrielanhaia profile

Make Your Coding Agent Wait 7 Days for New Packages: npm, pnpm, Yarn, Bun and uv

#security #npm #python #tutorial
1
Comments
9 min read
0.2.3 doesn't mean what you think: npm's caret below 1.0
getversyka profile

0.2.3 doesn't mean what you think: npm's caret below 1.0

#webdev #javascript #npm #node
Comments
2 min read
I got 140 downloads on day one. Then I found out who they were.
yevheniidev profile

I got 140 downloads on day one. Then I found out who they were.

#npm #javascript #opensource #webdev
Comments
2 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.