Meta tags:
description= npm content on DEV Community;
keywords= software development, engineering, npm;
Headings (most frequently used words):
npm, and, your, for, packages, agent, one, not, of, install, that, it, an, the, spain, holidays, posts, dev, community, make, coding, wait, days, new, pnpm, yarn, bun, uv, auth, verify, jwt, otp, passkeys, more, in, node, js, library, worms, ride, few, big, accounts, dependencies, doesn, mean, what, you, think, caret, below, got, 140, downloads, on, day, then, found, out, who, they, were, scanned, 35, real, skill, md, files, 16, tripped, rule, 10, them, anthropic, official, skills, limitcast, weekly, update, nov, safer, trimming, clearer, results, installed, deprecated, mcp, server, here, is, pre, gate, stops, token, accounting, autonomous, agents, open, source, tools, shipped, advisory, published, afternoon, blocked, our, hotfix, every, rollback, we, could, build, types, quick, fix, hate, changing, design, to, fit, each, platform, can, should, be, other, way, around, all, 2027, public, per, region, as, package, practical, hunt, workflow, malicious, their, infrastructure, reporting, ai, supply, chain, risk, with, evidence, levels, inflation, trending, guides, resources,
Text of the page (most frequently used words):
npm (40), and (21), nov (17), comments (16), follow (16), moderation (15), min (15), read (15), comment (14), the (13), your (13), add (13), dev (12), for (11), security (8), packages (8), javascript (8), with (7), that (7), agent (7), mcp (6), one (6), install (6), node (6), here (5), you (5), not (5), opensource (5), community (4), open (4), what (4), supply (4), chain (4), pnpm (4), pdf (4), vue (4), stops (4), server (4), package (4), posts (4), spain (4), holidays (4), create (3), their (3), built (3), software (3), other (3), source (3), accounts (3), published (3), day (3), how (3), fake (3), could (3), audit (3), our (3), platform (3), yarn (3), tools (3), 2027 (3), public (3), more (3), think (3), installed (3), deprecated (3), pre (3), gate (3), skill (3), sorrelthorncroft (3), facilishz (3), rb9744 (3), fores (3), jslab (3), sergey (3), shinder (3), orion (3), dekita (3), sam (3), stull (3), ulk0r0 (3), yevhenii (3), versyka (3), iain (3), jahongir (3), sobirov (3), gabriel (3), anhaia (3), menu (3), account (2), log (2), 2026 (2), use (2), code (2), free (2), broke (2), worm (2), next (2), skip (2), why (2), export (2), publishing (2), 404 (2), automated (2), from (2), command (2), prisma (2), left (2), ability (2), sort (2), top (2), latest (2), relevant (2), sign (2), zoomeye (2), supplychain (2), cybersecurity (2), reporting (2), risk (2), evidence (2), levels (2), inflation (2), practical (2), hunt (2), workflow (2), malicious (2), infrastructure (2), all (2), per (2), region (2), hate (2), changing (2), design (2), fit (2), each (2), can (2), should (2), way (2), around (2), types (2), quick (2), fix (2), reaction (2), advisory (2), afternoon (2), blocked (2), hotfix (2), every (2), rollback (2), build (2), token (2), accounting (2), autonomous (2), agents (2), shipped (2), limitcast (2), weekly (2), update (2), safer (2), trimming (2), clearer (2), results (2), scanned (2), real (2), files (2), tripped (2), rule (2), them (2), anthropic (2), official (2), skills (2), webdev (2), got (2), 140 (2), downloads (2), then (2), found (2), out (2), who (2), they (2), were (2), doesn (2), mean (2), caret (2), below (2), worms (2), ride (2), few (2), big (2), dependencies (2), auth (2), verify (2), jwt (2), otp (2), passkeys (2), library (2), make (2), coding (2), wait (2), days (2), new (2), bun (2), search (2), place, where, coders, share, stay, date, grow, careers, made, love, 2016, ruby, rails, powers, inclusive, communities, forem, terms, privacy, policy, conduct, mlh, shop, postgres, database, contact, about, showcase, organization, advertise, help, education, tracks, videos, challenges, home, space, discuss, keep, development, manage, career, servers, actually, tanstack, attack, dependabot, bump, spread, 000, machines, hacked, job, offers, mine, was, almost, malware, ran, claude, dangerously, permissions, yours, miss, vulnerabilities, building, better, workflows, trusted, fails, lying, advisories, withdrawn, popular, questioning, reliability, moved, backstage, notice, bananacool467, beta, newer, npm_token, january, migration, start, cloud, private, registry, publish, distribution, shai, hulud, now, steals, credentials, minute, doing, than, keeps, recommending, checked, which, ones, are, still, sitting, hardening, lifecycle, scripts, minimumreleaseage, postinstall, kept, rebuilding, features, fnm, captchakit, self, hosted, captcha, react, try, live, dependency, upgrades, generate, working, registered, user, parser, kotlin, multiplatform, pad, incident, explained, lines, before, npx, checks, would, have, caught, rea, repo, trending, guides, resources, dataset, reactnative, mobile, typescript, showdev, cicd, sergeyshinder, devtools, reactions, github, infosec, tutorial, python, right, 100, older, post, hide, manager, close, powered, algolia, navigation, content,
Text of the page (random words):
npm dev community skip to content navigation menu search powered by algolia search log in create account dev community close npm node package manager follow hide create post older npm posts 1 2 3 4 5 6 7 8 9 75 100 posts left menu sign in for the ability to sort posts by relevant latest or top right menu make your coding agent wait 7 days for new packages npm pnpm yarn bun and uv gabriel anhaia gabriel anhaia gabriel anhaia follow nov 8 make your coding agent wait 7 days for new packages npm pnpm yarn bun and uv security npm python tutorial comments add comment 9 min read moderation auth verify jwt otp passkeys and more in one node js library jahongir sobirov jahongir sobirov jahongir sobirov follow nov 8 auth verify jwt otp passkeys and more in one node js library node javascript security npm 1 reaction comments add comment 3 min read moderation npm s worms ride a few big accounts not your dependencies iain iain iain follow nov 7 npm s worms ride a few big accounts not your dependencies javascript opensource security npm comments add comment 6 min read moderation 0 2 3 doesn t mean what you think npm s caret below 1 0 versyka versyka versyka follow nov 7 0 2 3 doesn t mean what you think npm s caret below 1 0 webdev javascript npm node comments add comment 2 min read moderation i got 140 downloads on day one then i found out who they were yevhenii yevhenii yevhenii follow nov 6 i got 140 downloads on day one then i found out who they were npm javascript opensource webdev comments add comment 2 min read moderation i scanned 35 real skill md files 16 tripped a rule 10 of them anthropic s official skills ulk0r0 ulk0r0 ulk0r0 follow nov 6 i scanned 35 real skill md files 16 tripped a rule 10 of them anthropic s official skills security ai infosec npm comments add comment 3 min read moderation limitcast weekly update nov 6 safer trimming and clearer results sam stull sam stull sam stull follow nov 6 limitcast weekly update nov 6 safer trimming and clearer results github javascript node npm comments add comment 2 min read moderation your agent installed a deprecated mcp server here is a pre install gate that stops it dekita dekita dekita follow nov 6 your agent installed a deprecated mcp server here is a pre install gate that stops it ai security npm mcp 2 reactions comments 2 comments 7 min read moderation token accounting for autonomous agents 4 open source tools i shipped orion orion orion follow nov 6 token accounting for autonomous agents 4 open source tools i shipped ai opensource npm devtools comments add comment 1 min read moderation an advisory published that afternoon blocked our hotfix and every rollback we could build sergey shinder sergey shinder sergey shinder follow nov 6 an advisory published that afternoon blocked our hotfix and every rollback we could build sergeyshinder cicd npm security 1 reaction comments 1 comment 2 min read moderation npm packages types and the quick fix install jslab jslab jslab follow nov 6 npm packages types and the quick fix install showdev npm javascript typescript comments add comment 2 min read moderation hate changing your design to fit each platform it can and should be the other way around fores fores fores follow nov 6 hate changing your design to fit each platform it can and should be the other way around mobile opensource reactnative npm comments add comment 1 min read moderation spain holidays all 2027 public holidays of spain per region as an npm package rb9744 rb9744 rb9744 follow nov 5 spain holidays all 2027 public holidays of spain per region as an npm package javascript npm opensource dataset comments add comment 2 min read moderation a practical hunt workflow for malicious npm packages and their infrastructure facilishz facilishz facilishz follow nov 4 a practical hunt workflow for malicious npm packages and their infrastructure cybersecurity npm supplychain zoomeye comments add comment 3 min read moderation reporting ai supply chain risk with evidence levels not inflation sorrelthorncroft sorrelthorncroft sorrelthorncroft follow nov 4 reporting ai supply chain risk with evidence levels not inflation cybersecurity npm supplychain zoomeye comments add comment 3 min read moderation sign in for the ability to sort posts by relevant latest or top trending guides resources before you npx an mcp server 8 checks that would have caught the fake rea repo left pad incident explained how 11 lines of javascript broke npm built a user agent parser for kotlin multiplatform prisma generate not working no command registered prisma 8 how i automated npm dependency upgrades with an ai skill captchakit a self hosted captcha package for react next js try it live what is fnm your agent installed a deprecated mcp server here is a pre install gate that stops it i kept rebuilding pdf features in vue 3 so i built vue pdf export npm supply chain hardening in 2026 lifecycle scripts minimumreleaseage and the postinstall i s ai keeps recommending fake packages i checked which ones are still sitting open your npm install is doing more than you think the shai hulud worm now steals your ai agent credentials a 20 minute npm audit start a free cloud npm private registry from publish to public distribution your npm_token stops publishing in january 2027 here s the one command migration security notice bananacool467 ui tools use 0 1 9 beta or newer why we moved our backstage platform from yarn to pnpm npm security advisories withdrawn for popular packages questioning automated audit reliability npm trusted publishing fails with a 404 and the 404 is lying to you building better pdf workflows in vue 3 with vue pdf export why npm pnpm audit miss vulnerabilities the nx malware ran claude code with dangerously skip permissions could it on yours 30 000 machines hacked by fake job offers mine was almost next tanstack npm supply chain attack how a dependabot bump spread a worm i published 3 mcp servers in one day here s what actually broke dev community a space to discuss and keep up software development and manage your software career home dev challenges dev videos dev education tracks dev help advertise on dev organization accounts dev showcase about contact free postgres database dev shop mlh code of conduct privacy policy terms of use built on forem the open source software that powers dev and other inclusive communities made with love and ruby on rails dev community 2016 2026 we re a place where coders share stay up to date and grow their careers log in create account
|
