npm

NPMX – a fast, modern browser for the NPM registry

ChatGPT Containers can now run bash, pip/npm install packages and download files

Hackers can bypass npm’s Shai-Hulud defenses via Git dependencies

NPM to implement staged publishing after turbulent shift off classic tokens

Lotusbail npm package found to be harvesting WhatsApp messages and contacts

GitLab discovers widespread NPM supply chain attack

SHA1-Hulud the Second Comming – Postman, Zapier, PostHog All Compromised via NPM

NPM flooded with malicious packages downloaded more than 86,000 times

Cleaning house in Nx monorepo, how i removed unused deps safely

NPM package caught using QR Code to fetch cookie-stealing malware

Show HN: Tips to stay safe from NPM supply chain attacks

Oh no, not again a meditation on NPM supply chain attacks

Which NPM package has the largest version number?

Hackers left empty-handed after massive NPM supply-chain attack

You too can run malware from NPM (I mean without consequences)

NPM debug and chalk packages compromised

Rampant emoji use suggests crypto-stealing NPM package was written by AI

Not pretty, not Windows-only: npm phishing attack laces popular packages with malware

NPM package ‘is’ with 2.8M weekly downloads infected devs with malware

npm 'accidentally' removes Stylus package, breaks builds and pipelines