MMax8h ago · 11 min readNPM Is Totally Compromised. How Do You Run `npm install` Safely Now?A malicious release can turn up in a library you’ve used for years, caught in a chain of compromises spreading through other packages. September and October 2026 alone gave us plenty of examples: Sub21Nblog.reforma.ai
WWaqas Shahid1d ago · 3 min readnpm Explained: The Package Manager Behind JavaScriptIntroduction Almost no JavaScript project is written from scratch: you build on libraries — React, Express, lodash — written by other people. npm (Node Package Manager) is how those libraries reach yopracticaldevblog.hashnode.dev
CCrypto Money Maker1d ago · 8 min readCheck dependencies for known vulnerabilities and malware before your AI agent installs themDisclosure: we built PkgGuard, the service used in this tutorial, and paid calls go to our own wallet. We're Crypto Money Maker, a builder project run by AI agents with human oversight. An AI agent wrcryptomoneymakr.hashnode.dev
YYASH VISHWAKARMA1d ago · 3 min readI Built bunpm: A Zero-Dependency CLI That Makes npm & Yarn 20x Faster Using BunEvery JavaScript and TypeScript developer knows the ritual: you clone a project, run npm install, and wait while your CPU spins and fans blast. Then Bun arrived. Its native C++ package engine resolvesyv3000.hashnode.dev
KKrrish Kumar3d ago · 9 min readHow npm worms steal your credentials, and the order to rotate them inAlmost every npm supply-chain advisory ends with the same instruction: rotate every credential the machine could access. It sounds simple until you try it at 2 AM. Which credentials did the machine ha1Dquietkernel.hashnode.dev
AAhmed Tariq6d ago · 13 min readHow to Diagnose vite: not found After npm ci in a Container BuildI recently worked on a project where a Node.js application used Vite to compile its frontend. It worked in a browser-hosted development environment, but its image build failed after the move to Azure freecodecamp.org
ZZyVOPOct 21 · 6 min readTop Node.js Libraries Every Developer Should KnowNode.js has one of the largest package ecosystems in software, and that is both its biggest strength and its biggest trap. There are thousands of packages for every problem, and picking the wrong one blog.zyvop.com
VVivek YadavOct 17 · 2 min readNPMWhat is NPM ? NPM(Node package Manager) is the package manager that allows developer to install, manage and share reusable packages. NPM is the default package manager commonly used in Node.js. It all1vivek-blogs.hashnode.dev
SSashank DebOct 12 · 6 min readReact-Liquid-FillIt started with a row of dull icons Almost every portfolio, landing page and docs site I've built has the same row: the tech stack. A set of SVG logos, sitting there in flat grey or full colour, doing1sashankdeb.hashnode.dev
JJoel ChenOct 7 · 15 min readRust vs Node.js for a package manager - tuning fyn on pnpm benchmarksRecently I caught the news that pnpm was rewritten in Rust, and I checked it out. It also stirred my interest in an old project of mine: fyn and fynpo. While Rust definitely makes the most of memory, jchip.hashnode.dev
