FeedBagel

All Topics

Art

Best Practices for Creating a Modern npm Package with Security in Mind

1y agoen

programming

Source

SnykBest Practices for Creating a Modern npm Package with Security in Mindsnyk.io

Snippet from the RSS feed

In this tutorial, we’re going to walk step by step through creating an npm package using modern best practices (as of 2022).

You might also wanna read

NPM Security Best Practices Guide for Preventing Supply Chain Attacks

This GitHub repository provides comprehensive security best practices for NPM (Node Package Manager) to protect against supply chain attacks

github.com·9mo ago

Investigating npm Packages with the Largest Version Numbers

The author investigates which npm package has the largest version number after noticing the AWS SDK for JavaScript at version 3.888.0. The a

adamhl.dev·9mo ago

September 2025 NPM supply-chain attack compromises popular JavaScript packages

In September 2025, a coordinated software supply-chain attack targeted multiple popular NPM packages in the JavaScript ecosystem. The attack

projectptixiakis.github.io·1mo ago

npm Website Unavailable Under Investigation

npm's status page reports that the npm website is currently unavailable, with an ongoing investigation into the issue initiated on April 27,

status.npmjs.org·2mo ago

Popular npm packages debug and chalk compromised with crypto-intercepting malware

Starting September 8th, 2023, the popular npm packages "debug" and "chalk" were compromised with malicious code. These packages, which colle

aikido.dev·10mo ago

176 malicious npm packages used dependency confusion to target internal dependencies and steal credentials

Sonatype researchers uncovered a campaign involving 176 malicious npm packages using a dependency confusion attack strategy. Attackers publi

sonatype.com·1mo ago

Comments

No comments yet. Be the first.