---
title: "#dependency-risks articles | Hashnode"
description: "Explore 2 articles tagged #dependency-risks on Hashnode. Tutorials, guides, and how-tos from the community."
url: "https://hashnode.com/tag/dependency-risks"
---

Tag

# #dependency-risks

2 posts · 0 followers

[praveen](https://hashnode.com/@thecoderegistry) · [Aug 25](https://hashnode.com/posts/how-to-detect-hidden-risks-in-third-party-software/6a8dcc2e643d0366f570c21a)

### [How to Detect Hidden Risks in Third-Party Software](https://thecoderegistry.hashnode.dev/how-to-detect-hidden-risks-in-third-party-software?utm_source=hashnode&utm_medium=feed)

Identify Security, Dependency, Licensing, and Code Risks in Third-Party Software

17 min read · [thecoderegistry.hashnode.dev](https://thecoderegistry.hashnode.dev/how-to-detect-hidden-risks-in-third-party-software?utm_source=hashnode&utm_medium=feed)

[Hong](https://hashnode.com/@hongster) · [Jun 2, 2025](https://hashnode.com/posts/npms-security-dilemma-how-malicious-packages-exploit-openness-and-the-path-forward/683d33db26a8e807e89db00f)

### [npm's Security Dilemma: How Malicious Packages Exploit Openness and the Path Forward](https://saysomething.hashnode.dev/npms-security-dilemma-how-malicious-packages-exploit-openness-and-the-path-forward?utm_source=hashnode&utm_medium=feed)

The discovery of malicious npm packages like xlsx-to-json-lh—a six-year-old typosquatting artifact mimicking the legitimate xlsx-to-json-lc—alongside broader campaigns involving 60+ packages, underscores systemic vulnerabilities in npm's security mod...

3 min read · [saysomething.hashnode.dev](https://saysomething.hashnode.dev/npms-security-dilemma-how-malicious-packages-exploit-openness-and-the-path-forward?utm_source=hashnode&utm_medium=feed)