Back to article
docs.npmjs.com

Trusted Publishing for NPM Packages (opens in new tab)

Covered by 5 sources See all sources covering this story including GitHub, thehackernews.comDiscussed on Hacker News

Covered in 5 articles

GitHub·

unloopedmido/contextlevy: PR context-cost checks for AI coding agents — bundle-size checks for agent context.

Discussed on Hacker News
Feeds
thehackernews.com·

npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks

Feeds
github.blog·

Staged publishing and new install-time controls for npm

Discussed on Hacker News and Lobsters
Feeds
Tenable Blog·

Download pumping: New npm deception technique for supply chain attacks

Feeds
neciudan.dev·

https://neciudan.dev/github-actions-poisoning

Discussed on r/netsec, r/node, and r/programming
Feeds

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help