#Npm

If you've ever run npm install and thought "what exactly did I just put on my machine?", this one's...

This post is part of my weekly newsletter - Top 5 in Frontend and AI. Subscribe so you can deep dives...

I Published My First npm Package — Here's Everything I Wish I Knew Publishing to npm is...

I Published My First npm Package — Here's Everything I Wish I Knew Publishing to npm isn't...

Attackers stole a limited amount of internal credential material after malware hidden in poisoned packages reached two staff machines

Every time you run npm install, you're rolling dice. A postinstall script from some dependency three...

Wire Fire: Episode 01 The Permanent State npm (the open registry that nearly every...

From Dev.to - typescript: New npm package, check it out and hope it will be helpful for frontend engineers.

I used Sonner for almost everything before robot-toast existed. Genuinely liked it. Clean, premium,...

On April 28, 2026, pnpm 11 was released with some of the strongest security defaults we've seen from...

Over the last few weeks, supply chain security has once again become a very real problem for...

From Dev.to - javascript: I got tired of calculating commercial lease billing by hand, so I built a tool

How the TanStack npm compromise fits into the broader Mini Shai-Hulud campaign across npm, PyPI, GitHub Actions, IDE hooks, and CI/CD secrets.

Yesterday, between 19:20 and 19:26 UTC, six minutes of automated publishing destroyed the trust model...

Honestly, it's exhausting to wake up and find out there's yet another attack on the npm...

From Dev Community: Can you stop attacking #npm packages? I'm scared of installing packages. Now it's time to switch 100% to PNPM...

From Dev.to - nodejs: Automate Social Media Image Generation with n8n + RenderPix

After weeks of development, I'm excited to share ZProximity Engine - a React library for creating...

From Dev Community: I Built My Own Config Format for Node.js That Separates Server and Client Secrets

Learn to automate NPM package publishing using GitHub Actions. This guide covers setting up build steps, secure token management, and CI/CD best practices for