DEV Community

npm

Node Package Manager

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
npm packages, types, and the quick-fix install

npm packages, types, and the quick-fix install

Comments
2 min read
spain-holidays: all 2027 public holidays of Spain, per region, as an npm package

spain-holidays: all 2027 public holidays of Spain, per region, as an npm package

Comments
2 min read
A Practical Hunt Workflow for Malicious npm Packages and Their Infrastructure

A Practical Hunt Workflow for Malicious npm Packages and Their Infrastructure

Comments
3 min read
Reporting AI Supply-Chain Risk With Evidence Levels, Not Inflation

Reporting AI Supply-Chain Risk With Evidence Levels, Not Inflation

Comments
3 min read
A Fiverr "client" sent me a Next.js project. One npm run dev would have hacked my PC

A Fiverr "client" sent me a Next.js project. One npm run dev would have hacked my PC

1
Comments 3
6 min read
packaged something

packaged something

Comments 1
1 min read
npm 12 Blocks Install Scripts by Default. Node 26 LTS, Out Oct 28, Still Ships npm 11.

npm 12 Blocks Install Scripts by Default. Node 26 LTS, Out Oct 28, Still Ships npm 11.

Comments
8 min read
Cooldown 1 Hari Memblokir 70% Rilis npm yang Dibajak di 2026. Untuk Typosquat, 7 Hari Masih Meloloskan 45%

Cooldown 1 Hari Memblokir 70% Rilis npm yang Dibajak di 2026. Untuk Typosquat, 7 Hari Masih Meloloskan 45%

Comments
7 min read
npm vs PyPI MCP servers: dependency advisories side by side

npm vs PyPI MCP servers: dependency advisories side by side

Comments
3 min read
620,000 Downloads Last Week for MCP Servers That Will Never Be Patched

620,000 Downloads Last Week for MCP Servers That Will Never Be Patched

Comments
3 min read
india-formatter: A Lightweight JavaScript Toolkit for Indian Developers 🇮🇳

india-formatter: A Lightweight JavaScript Toolkit for Indian Developers 🇮🇳

Comments
3 min read
242,072 malware flags on npm and PyPI, and what the registries did about them

242,072 malware flags on npm and PyPI, and what the registries did about them

Comments
12 min read
Edit Currículo Lattes XML Safely with TypeScript and lattes-toolkit

Edit Currículo Lattes XML Safely with TypeScript and lattes-toolkit

Comments
6 min read
Upgrade a Major Dependency With a Coding Agent: Changelog First, Then the Failing Tests

Upgrade a Major Dependency With a Coding Agent: Changelog First, Then the Failing Tests

Comments
10 min read
A 1-Day Cooldown Would Have Blocked 70% of 2026's Hijacked npm Releases. Against Typosquats, 7 Days Still Misses 45%

A 1-Day Cooldown Would Have Blocked 70% of 2026's Hijacked npm Releases. Against Typosquats, 7 Days Still Misses 45%

1
Comments
8 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.