📦 Package Managers - buckman · Scour

How We Strengthened Dependency Security in Our Monorepo 📦Dependency Confusion

dev.to·6d·DEV

93 Minutes on npm: Inside the Bitwarden CLI Supply Chain Attack 🔗Supply Chain Attacks

·1d

Npm Supply Chain Malware Attack Targets Developers With Worm-Like Propagation 🔗Supply Chain Attacks

infosecurity-magazine.com·2d

pnpm 11 Release Candidate: ESM Distribution, Supply Chain Defaults and a New Store Format 📦Dependency Confusion

Air-Gapped Deployments: How to Deploy to Servers Without Internet Access (Complete Guide) 🏗️Immutable Infrastructure

semaphore.io·2d

Self-Propagating npm Malware Turns Trusted Packages Into Attack Paths 🌍Browser Exploits

malware.news·3d

Two Types of npm Supply Chain Attack: What Catches Each 🔗Supply Chain Attacks

dev.to·12h·DEV

Another npm supply chain worm is tearing through dev environments 🔗Supply Chain Attacks

theregister.com·3d·Hacker News

repomeld 🔥 – Turn Your Entire Repo into One Clean File for AI & Reviews 🦠Malware

npmjs.com·5d·DEV

Setting Up Docker CI for Rust with cargo-dist 🐳Docker

dev.to·8h·DEV

React Email 6.0, Vercel got hacked, Prevent flash before hydration, Logging in Next.js, shader-lab, TypeScript 7.0, nextmap 🌍Browser Exploits

dev.to·2d·DEV

Continuous monitoring caught a credential leak in a published MCP package. Six republishes later, it is still there. 📦Dependency Confusion

dev.to·1d·DEV

Supply Chain & AI Security: Bitwarden CLI Compromise, AI Sandbox Escapes, GitHub Actions Hardening 🔗Supply Chain Attacks

dev.to·2d·DEV

10 npm Packages You'll Actually Use in 2026 ⎈Helm

dev.to·4d·DEV

CI/CD Build Systems for Cloud-Native Applications ⚙️DevOps

dev.to·4d·DEV

OpenClaw Plugins — Ecosystem Guide and Practical Picks ⎈Helm

dev.to·6d·DEV

I scanned the top 20 npm packages. Everyone passed CVE checks, but here's what the static analysis found 📦Dependency Confusion

dev.to·5d·DEV

production-grade deployment of The Epic Book, a Node.js + MySQL web application on AWS ☁️AWS Infrastructure

dev.to·3d·DEV

The Hidden Cost of AI Coding Agents: Every Tool Is Fetching the Same Data 🤖AI Coding Tools

dev.to·6d·DEV

k8s4claw: A Kubernetes Operator for Managing AI Agent Runtimes ☸️K8S

dev.to·5d·DEV

No more posts from buckman's subscribed feeds.

Scour all 24389 feeds Learn more about Feeds

Log in to enable infinite scrolling