From Dev.to Community
Tech Articles
Curated developer articles, tutorials, and guides โ auto-updated hourly
yutianleSep 20, 2026 โข 3 min read
The Shai-Hulud npm worm showed that opening a folder is enough to run code
How the Shai-Hulud npm worm executed code through editor and agent configuration files, and why buil...
#supplychain#npm#developertooling#credentialtheft
0 0
KanuniLabsSep 24, 2026 โข 4 min read
What "free" means when a data grid also sells a paid edition
Plenty of data grid libraries with a paid edition also have a free one, and the word "free" on their...
#javascript#react#webdev#npm
1 0
Deval UjeniyaSep 24, 2026 โข 6 min read
express-validator
express-validator A practical set of notes covering validation chains, sanitization,...
#express#backenddevelopment#javascript#npm
1 0
VIctor MartinsSep 22, 2026 โข 5 min read
capsurface: reviewing capability changes in npm dependencies
A dependency bot opens a PR. One version changes, the tests pass, and the changelog says...
#security#npm#javascript#node
1 0
KanuniLabsSep 21, 2026 โข 4 min read
Is that free data grid free for your project? Checks you can run in a terminal
A few weeks ago we found that our own pricing page listed a paid feature under the free tier. Nobody...
#javascript#npm#react#webdev
1 0
NahidSep 20, 2026 โข 2 min read
Good News For Backend And Devops Buddy
I shipped a Goated tool Today: API Performance Profiler. It answers one question backend devs ask.....
#backend#devops#npm#devtool
0 0
Renan FrancaSep 18, 2026 โข 3 min read
Following Seed4J's Main Branch with Seed4J CLI Experimental
Why I created an experimental npm channel for Seed4J CLI, how it validates updates from Seed4J's mai...
#githubactions#devops#opensource#npm
8 0
Muhammad TahirSep 23, 2026 โข 9 min read
Modern Open-Source Maintenance: Secure Package Publishing, SemVer, and Automated Scanning
Learn how to securely publish packages, master Semantic Versioning 2.0.0, and automate security scan...
#opensource#npm#securityscanning#semanticversioning
0 0
Teo CrispinSep 23, 2026 โข 2 min read
AI Coding Assistants Invent Fake Packages 1 in 5 Times โ Attackers Are Already Registering Them
Last month, a threat actor published nearly 800 malicious npm packages in a 48-hour window โ a...
#security#ai#webdev#npm
0 0
Muhammad Nauman HafeezSep 23, 2026 โข 3 min read
A Supply-Chain Attack Hit Our Repos. Here's How We Locked Down GitHub So It Can't Happen Again
This is the follow-up to my previous post: A Poisoned npm Package Infected Our Production Server,...
#github#devops#security#npm
0 0
Iurii RoguliaSep 18, 2026 โข 8 min read
Caching VAT and FX Rates at Build Time, Not on the Request Path
Why a Next.js e-commerce project fetches EUR/VAT reference data once per build instead of once per r...
#node#typescript#ecb#npm
0 0
Noble RoninSep 21, 2026 โข 8 min read
I Wanted to Pay My Dependencies. Only One of Three Registries Would Let Me Find Out Who to Pay.
I run a small actor that normalizes package metadata across npm, PyPI and crates.io โ version,...
#discuss#programming#opensource#npm
0 1
Masaud AhmodSep 22, 2026 โข 4 min read
I Built a Toast Library for React & Next.js โ Hereโs How It Works ๐
If youโve worked on modern web applications, youโve probably used toast notifications. โSaved...
#npm#productivity#opensource#node
2 2
Syed MohamedSep 22, 2026 โข 1 min read
๐จ๐ป๐ฑ๐ฒ๐ฟ๐๐๐ฎ๐ป๐ฑ๐ถ๐ป๐ด ๐๐ป๐ด๐๐น๐ฎ๐ฟ ๐๐๐ป๐ฑ๐ฎ๐บ๐ฒ๐ป๐๐ฎ๐น๐
๐๐ป๐ด๐๐น๐ฎ๐ฟ ๐ง๐๐๐ผ๐ฟ๐ถ๐ฎ๐น ๐ฆ๐ฒ๐ฟ๐ถ๐ฒ๐ โ ๐๐ฎ๐ ๐ญ | ๐จ๐ป๐ฑ๐ฒ๐ฟ๐๐๐ฎ๐ป๐ฑ๐ถ๐ป๐ด ๐๐ป๐ด๐๐น๐ฎ๐ฟ...
#angular#typescript#node#npm
0 0
LeoSep 24, 2026 โข 3 min read
The CrowdSec leak is a lesson in the OAuth token you forgot to revoke
About 170 private CrowdSec repositories were cloned after the TanStack npm compromise scraped an OAu...
#supplychain#oauth#github#npm
0 0
LeoSep 19, 2026 โข 3 min read
npm's stage-only token scope puts a human between CI and the registry
GitHub added a Read and write (stage only) scope to npm granular access tokens. A workflow with the ...
#npm#supplychainsecurity#accesstokens#2fa
0 0
Luiz Filipe TavaresSep 23, 2026 โข 1 min read
230 Downloads minha API teve no npm
Recentemente lancei minha api no NPM e jรก obtive 230 download.
#ai#discuss#braziliandevs#npm
0 0
Bryan ClarkSep 20, 2026 โข 8 min read
Adding a type column to a shared registry breaks every consumer's filter
A shared data package grew an optional kind: "tide" field, with absent meaning "current" for...
#architecture#datamodel#npm#typescript
0 0
OlegSep 24, 2026 โข 4 min read
Navigating npm's Package Name Gauntlet: Lessons from the 'mimify' Dispute for Effective Software Planning
When Good Names Get Blocked: A Deep Dive into npm Package Disputes In the fast-paced world...
#npm#tooling#developerproductivity#technicalleadership
0 0
adityahalderSep 19, 2026 โข 1 min read
Fix npm EACCES Without sudo: nvm vs User Prefix
Seeing EACCES from npm install -g? Diagnose the active Node prefix first. This guide separates...
#npm#node#developertools
0 0
adityahalderSep 20, 2026 โข 1 min read
npm 12 Native Modules: Silent Build Failures
npm 12 can finish with exit code 0 while a native dependency has no usable binary. This guide...
#npm#node#developertools#nativeaddons
0 0
RemoteBrowserSep 20, 2026 โข 7 min read
Puppeteer Browsers Npm: Install, Connect, and Run Remotely
Understand puppeteer browsers npm installs, version pinning, and how to connect Puppeteer to a hoste...
#puppeteer#npm#browserautomation#remotebrowser
0 0