Node.js

Feeds to Scour
SubscribedAll
Scoured 427 posts in 8.7 ms

Stop Guessing What ^18.2.0 Actually Installs

 ▲Next.js
devencyclopedia.com··DEV

npm v12 delivers one of the biggest security improvements in years

 🐘PHP  Content type: Blog
aikido.dev·

subhashadhikari057/teamflow-backend: Open source team communication platform built with NestJS, Next.js, and PostgreSQL.

 🗄️Databases  Content type: Code
github.com··r/SideProject

Upcoming breaking changes for npm v12 - GitHub Changelog

 ▲Next.js  Content type: Blog  Content type: Tutorial
github.blog··Lobsters, Hacker News, r/javascript, r/node

AUR Packages Attacked by Infostealer

 ▲Next.js
lists.archlinux.org··Lobsters, Hacker News

npm Just Shipped New Supply Chain Controls. Watch How Your Organization Misreads Them.

 ▲Next.js  Content type: Blog
medium.com
·

GitHub to Disable npm Install Scripts by Default to Stop Supply Chain Attacks

 🔷TypeScript
thehackernews.com·

Location: São Paulo, Brazil Remote: Yes Willing to relocate: No Technologies: Ty...

 🚀DevOps  Content type: Discussion
news.ycombinator.com··Hacker News

Your Package Manager Is Lying to You: npm, Yarn, pnpm, Bun, and Deno tradeoffs

 ▲Next.js  Content type: Blog
blog.gaborkoos.com··Hacker News, r/javascript, r/node, r/programming, r/typescript, r/webdev

npm v12 Is Coming in July — Here’s What Developers Need to Do Now

 🚀DevOps
devops.com·

Arch Linux AUR Malware Campaign Hits Multiple User-Contributed Packages

 🚀DevOps
linuxiac.com··Hacker News

GitHub announces npm security changes to tackle supply-chain attacks

 🚀DevOps  Content type: News
bleepingcomputer.com·

Install-script allowlists

 🐘PHP  Content type: Blog
nesbitt.io·

Your agent just scaffolded a project from 2020

 ▲Next.js  Content type: Blog
developer.microsoft.com·

Node.js Annual Releases, Terraform 1.15, Gemma 4 Multimodal

 🚀DevOps  Content type: Discussion
thedevsignal.com··DEV
Less-relevant results

Atomic Arch npm Campaign Adds Malicious Dependency

 🔷TypeScript
malware.news·

npm Tooling Bug Incorrectly Marks One-Character Packages as Security Holders

 🔷TypeScript  Content type: Blog
socket.dev·

Show HN: Master – Rails-style full-stack productivity for Node.js

 🗄️Databases  Content type: Blog  Content type: Discussion
bookbag.ai··Hacker News

GitHub pulls pin on npm's auto-run scripts

 🚀DevOps  Content type: News
theregister.com··Hacker News

I built a 3KB alternative to replace zxcvbn (389KB) without detection loss

 ⚡Web Performance  Content type: Blog
medium.com
··r/webdev

Keyboard Shortcuts

Navigation

Next / previous item
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Browse
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help