npm passes the 1 millionth package milestone! What can we learn?
Source
Snyknpm passes the 1 millionth package milestone! What can we learn?snyk.ioYou might also wanna read
Investigating npm Packages with the Largest Version Numbers
The author investigates which npm package has the largest version number after noticing the AWS SDK for JavaScript at version 3.888.0. The a
NPM Vulnerability Allows 126 Malicious Packages to Be Downloaded 86,000+ Times
Security researchers have discovered a major vulnerability in NPM (Node Package Manager) that allows attackers to distribute malicious packa
arstechnica.com·8mo ago
September 2025 NPM supply-chain attack compromises popular JavaScript packages
In September 2025, a coordinated software supply-chain attack targeted multiple popular NPM packages in the JavaScript ecosystem. The attack
Popular npm packages debug and chalk compromised with crypto-intercepting malware
Starting September 8th, 2023, the popular npm packages "debug" and "chalk" were compromised with malicious code. These packages, which colle
aikido.dev·10mo ago176 malicious npm packages used dependency confusion to target internal dependencies and steal credentials
Sonatype researchers uncovered a campaign involving 176 malicious npm packages using a dependency confusion attack strategy. Attackers publi
npmx: A Modern Browser Interface for the npm Package Registry
npmx is a modern, fast browser interface for the npm package registry that provides instant search capabilities and a clean user experience.

Comments
Sign in to join the conversation.
No comments yet. Be the first.