DEV Community

npm

Node Package Manager

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
🍬 Candy Logger v2.1.0 - The Correctness Release

🍬 Candy Logger v2.1.0 - The Correctness Release

Comments
7 min read
Publishing My First Rust npm Package (@seucra/matrix-sdk-bridge)

Publishing My First Rust npm Package (@seucra/matrix-sdk-bridge)

Comments
2 min read
DS Express Errors (centralizing errors library) — v1.9.1 Release Notes August 13, 2026

DS Express Errors (centralizing errors library) — v1.9.1 Release Notes August 13, 2026

1
Comments
1 min read
Introducing mutex-forge: Mutex & Semaphore for async JavaScript

Introducing mutex-forge: Mutex & Semaphore for async JavaScript

5
Comments 1
1 min read
npm provenance attestations get worn as camouflage in a new worm-style attack

npm provenance attestations get worn as camouflage in a new worm-style attack

Comments
5 min read
Two npm worms shipped with valid provenance this year

Two npm worms shipped with valid provenance this year

1
Comments
5 min read
responsive-tailwind: The Utility That Refuses To Build Your Class Names

responsive-tailwind: The Utility That Refuses To Build Your Class Names

Comments
6 min read
The GITHUB_TOKEN in Your .zshrc Is a Time Bomb (And So Is Your .npmrc)

The GITHUB_TOKEN in Your .zshrc Is a Time Bomb (And So Is Your .npmrc)

Comments
5 min read
When ‘Are We Affected?’ Requires Reconstructing Yesterday’s npm Install

When ‘Are We Affected?’ Requires Reconstructing Yesterday’s npm Install

1
Comments
3 min read
Keyv and Cacheable npm Supply Chain Compromise

Keyv and Cacheable npm Supply Chain Compromise

Comments
7 min read
⚠️ Shai-Hulud opens your IDE: the npm worm that beats --ignore-scripts

⚠️ Shai-Hulud opens your IDE: the npm worm that beats --ignore-scripts

2
Comments
6 min read
The npm `overrides` Snippet Everyone Copy-Pastes — And What It Actually Does

The npm `overrides` Snippet Everyone Copy-Pastes — And What It Actually Does

1
Comments
4 min read
I Published My First npm Package - BurnLink

I Published My First npm Package - BurnLink

Comments
1 min read
🚀 SuriLens: An Open-Source Real-Time Backend Execution Visualizer for Node.js

🚀 SuriLens: An Open-Source Real-Time Backend Execution Visualizer for Node.js

Comments
2 min read
npm walls off 2FA-bypass tokens from account and package management

npm walls off 2FA-bypass tokens from account and package management

Comments
3 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.