The npm registry now includes Socket security analysis links directly on package pages to help developers assess supply chain risks.
Someone compromised open source AI coding assistant Cline CLI's npm package earlier this week in an odd supply chain attack ...
Concerned users can set up their own backup system if they don’t trust the steps NPM Inc. has taken to prevent problems The NPM registry of JavaScript packages has become a critical cog in the ...
OAKLAND, Calif.--(BUSINESS WIRE)--npm, Inc., which runs the world’s largest software registry and maintains the `npm` software development tool, today announced that the npm Registry has achieved one ...
Bad actors using typo-squatting place 39 malicious packages in npm that went undetected for two weeks. How should the open source community respond? Software development relies heavily on trust, ...
Security experts have urged the npm registry to deploy anti-bot technology after revealing that the open source repository has suffered intermittent denial of service (DoS) outages over the past month ...
Is the public NPM JavaScript package registry going away? NPM, the company behind the popular online repository of Node.js and JavaScript code, insists it will remain, despite a recent rumor to the ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results