Search Articles — Sudonull

Search Results

In this project

npm Dependency Bloat: 3 Causes and Solutions

https://sudonull.com/npm-dependency-bloat-3-causes-and-solutions

Analysis of Reasons for Growth of Dependency Trees in JavaScript: legacy support, atomic packages, outdated ponyfills. Tools for cleanup and bundle optimization for middle/senior dev. Learn how to reduce size by 50%.

RAT in Axios npm: phantom dependency and Claude Code leak

https://sudonull.com/rat-in-axios-npm-phantom-dependency-and-claude-code-leak

Analysis of attacks on Axios and Anthropic: RAT via postinstall, sourcemap leak of 512k lines. Checks, IOC, clean-room Python implementation. For middle/senior dev.

Malicious npm package steals Polymarket bots keys

https://sudonull.com/malicious-npm-package-steals-polymarket-bots-keys

Learn about the attack via the sleek-pretty package in npm: theft of API keys and SSH backdoors for Polymarket developers. How to protect bots and wallets — read the risk analysis and recommendations.

iOS and npm Exploits Leaks in March 2026

https://sudonull.com/ios-and-npm-exploits-leaks-in-march-2026

Breakdown of Key Cybersecurity Incidents: Coruna, DarkSword, Axios, Claude Code. Supply Chain Compromises and Regulations. For Developers — How to Protect CI/CD and Source Code. Read the Analysis.

CanisterWorm in npm: attack after Trivy

https://sudonull.com/canisterworm-in-npm-attack-after-trivy

Analysis of CanisterWorm worm: ICP C2, theft of npm tokens, systemd persistence. How to protect the supply chain from self-propagation. Analysis for developers.

From the web

npm | Home

https://www.npmjs.com/

Relied upon by more than 17 million developers worldwide, npm is committed to making JavaScript development elegant, productive, …

npm - npm

https://www.npmjs.com/package/npm

The precursor to npm was actually a bash utility named "pm", which was the shortform name of "pkgmakeinst" - a bash function that …

Downloading and installing Node.js and npm | npm Docs

https://docs.npmjs.com/downloading-and-installing-node-js-and-npm/?ref=meilisearch-blog

To publish and install packages to and from the public npm registry or a private npm registry, you must install Node.js and the npm …

Download Node.js®

https://nodejs.org/en/download

Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, …

install | npm Docs

https://docs.npmjs.com/cli/v9/configuring-npm/install/?v=true

Description To publish and install packages to and from the public npm registry, you must install Node.js and the npm command line …

An introduction to the npm package manager | Node.js Learn

https://nodejs.org/learn/getting-started/an-introduction-to-the-npm-package-manager

An introduction to the npm package manager Introduction to npm npm is the standard package manager for Node.js. In September …

What is npm - W3Schools

https://www.w3schools.com/whatis/whatis_npm.asp

The World's Largest Software Registry (Library) npm is the world's largest Software Registry. The registry contains over 800,000 …

NPM - Wikipedia

https://en.wikipedia.org/wiki/NPM

npm, the default package manager for the JavaScript runtime environment Node.js Network performance management Nintendo …

GitHub - npm/cli: the package manager for JavaScript

https://github.com/npm/cli

the package manager for JavaScript. Contribute to npm/cli development by creating an account on GitHub.

npm - GitHub

https://github.com/npm

JavaScript Package Manager, Registry & Website. npm has 358 repositories available. Follow their code on GitHub.

Trending Now