[go: up one dir, main page]

DEV Community

npm

Node Package Manager

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Malicious npm Packages With Valid SLSA Provenance: Inside the TanStack Attack
olivrg profile

Malicious npm Packages With Valid SLSA Provenance: Inside the TanStack Attack

#npm #security #agents #mcp
1
Comments 2
5 min read
42 @tanstack/* Packages Were Compromised on npm: What Happened, How It Works, and What You Must Do Right Now
devcodehub99 profile

42 @tanstack/* Packages Were Compromised on npm: What Happened, How It Works, and What You Must Do Right Now

#javascript #security #npm #webdev
Comments
10 min read
The TanStack npm Attack Shows Why pnpm 11 Matters
audreyhal profile

The TanStack npm Attack Shows Why pnpm 11 Matters

#cicd #javascript #npm #security
2
Comments
3 min read
LibKill: Scan Your Machine for Compromised npm, pip, and Bun Packages
firfircelik profile

LibKill: Scan Your Machine for Compromised npm, pip, and Bun Packages

#security #npm #ai #programming
Comments
3 min read
Mini Shai-Hulud: A persistent supply-chain worm
dwayne_mcdaniel profile

Mini Shai-Hulud: A persistent supply-chain worm

#security #supplychain #npm #securityresearch
1
Comments 1
3 min read
How I Built the Two Missing Payload CMS v3 Plugins — Reviews, JSON-LD & Real Production Bugs
spiritrackingarch profile

How I Built the Two Missing Payload CMS v3 Plugins — Reviews, JSON-LD & Real Production Bugs

#npm #nextjs #opensource #payload
Comments
5 min read
Deep Dive: TanStack npm supply-chain compromise
shrutikapoor08 profile

Deep Dive: TanStack npm supply-chain compromise

#githubactions #javascript #npm #security
1
Comments
3 min read
Building a CLI Tool with Node.js (From Zero to npm)
armorbreak profile

Building a CLI Tool with Node.js (From Zero to npm)

#cli #node #npm #tutorial
Comments
4 min read
I Built My Own Config Format for Node.js That Separates Server and Client Secrets
kanishq9 profile

I Built My Own Config Format for Node.js That Separates Server and Client Secrets

#node #npm #security #opensource
1
Comments 2
5 min read
Scanning npm Packages for Malware Before You Install, Without Running Them
pavelespitia profile

Scanning npm Packages for Malware Before You Install, Without Running Them

#security #javascript #npm #devops
Comments 2
6 min read
date-light: A 1.8KB Alternative to date-fns You Might Actually Like
flyingsquirrel0419 profile

date-light: A 1.8KB Alternative to date-fns You Might Actually Like

#javascript #typescript #npm #opensource
1
Comments 2
3 min read
Scarab Diagnostic Field Test #021 — pnpm Self-Upgrade No-Manifest Boundary
scarab-systems profile

Scarab Diagnostic Field Test #021 — pnpm Self-Upgrade No-Manifest Boundary

#discuss #ai #npm #devops
2
Comments
4 min read
The NPM Audit Trap: A Thursday Morning Tragedy
proco profile

The NPM Audit Trap: A Thursday Morning Tragedy

#webdev #node #npm
Comments
2 min read
Shipping archkit v0.1: a TypeScript Clean Architecture scaffolder built in one Claude Code session
alexrogovjs profile

Shipping archkit v0.1: a TypeScript Clean Architecture scaffolder built in one Claude Code session

#typescript #cleanarchitecture #npm #claudecode
Comments 1
7 min read
Hi all
ayushmahadik profile

Hi all

#showdev #design #npm #ui
Comments
1 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.