DEV Community

npm

Node Package Manager

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Slopsquatting: Your AI Assistant Invents Packages, Attackers Register Them

Slopsquatting: Your AI Assistant Invents Packages, Attackers Register Them

Comments
7 min read
The Hard Part of Leaving `request` is the App Built Around It

The Hard Part of Leaving `request` is the App Built Around It

1
Comments
3 min read
In 2013 I wrote a diploma on elliptic curves. Last night my tool used them to check its own release.

In 2013 I wrote a diploma on elliptic curves. Last night my tool used them to check its own release.

1
Comments
7 min read
DevYard: Resurrecting the Ghosts in Your Code Machine with Local Open-Source AI

Hacktoberfest Open-Source AI Challenge: Ghost in the Machine Submission 👻🌼

DevYard: Resurrecting the Ghosts in Your Code Machine with Local Open-Source AI

Comments
3 min read
Deobfuscating Malicious npm & Browser Payloads: Base64, Hex, Unicode Escapes & Homoglyphs

Deobfuscating Malicious npm & Browser Payloads: Base64, Hex, Unicode Escapes & Homoglyphs

Comments
8 min read
I need to discuss this about Gemini

I need to discuss this about Gemini

1
Comments
4 min read
GitHub brings new digital filter to block dangerous software packages

GitHub brings new digital filter to block dangerous software packages

Comments
2 min read
How I Cut 40KB from My Edge Bundle with Zero-Dep Utils

How I Cut 40KB from My Edge Bundle with Zero-Dep Utils

Comments
2 min read
Why your firebase-admin 14 Dependabot PR fails with ERESOLVE (and how to unblock it)

Why your firebase-admin 14 Dependabot PR fails with ERESOLVE (and how to unblock it)

Comments
4 min read
npm Supply Chain: The Worm That Walked In Through Trusted Publishing

npm Supply Chain: The Worm That Walked In Through Trusted Publishing

Comments
10 min read
Three gates before your first npm publish: 2FA, provenance, and staged releases

Three gates before your first npm publish: 2FA, provenance, and staged releases

1
Comments
6 min read
Why I Built bunpm: Route npm, yarn & pnpm Through Bun Without Touching Your Scripts

Why I Built bunpm: Route npm, yarn & pnpm Through Bun Without Touching Your Scripts

1
Comments
2 min read
I Found 53 Real Email Addresses Behind One Tiny npm Package

I Found 53 Real Email Addresses Behind One Tiny npm Package

Comments
7 min read
A maintained package can still ship malware. What a health check can and can't see.

A maintained package can still ship malware. What a health check can and can't see.

Comments 2
11 min read
Three bugs my npm packages shipped, and the checks that catch them now

Three bugs my npm packages shipped, and the checks that catch them now

Comments
3 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.