Topic
#npm security
Loot, blog posts and adjacent themes connected to this topic. Follow the tag to keep it in your orbit.
Loot
More from this topic
No loot for #npm security yet
When the community shares matching finds, they will appear here. For now, browse all loot or submit the first drop.
Blog
Related reads
Tools & Apps
TanStack supply-chain compromise confirmed: what JavaScript teams should check after the AI-dev-tool scare
TanStack has confirmed a real npm supply-chain compromise, and the bigger lesson is not just package trust. It is how modern release pipelin…
Sicherheit & DevOps
Bitwarden CLI supply-chain malware: what developers need to know now
A malicious Bitwarden CLI package on npm turned a trusted developer tool into a secret-stealing supply-chain threat. Here’s what happened, w…