Search Articles — Sudonull

Search Results

In this project

npm Dependency Bloat: 3 Causes and Solutions

https://sudonull.com/npm-dependency-bloat-3-causes-and-solutions

Analysis of Reasons for Growth of Dependency Trees in JavaScript: legacy support, atomic packages, outdated ponyfills. Tools for cleanup and bundle optimization for middle/senior dev. Learn how to reduce size by 50%.

RAT in Axios npm: phantom dependency and Claude Code leak

https://sudonull.com/rat-in-axios-npm-phantom-dependency-and-claude-code-leak

Analysis of attacks on Axios and Anthropic: RAT via postinstall, sourcemap leak of 512k lines. Checks, IOC, clean-room Python implementation. For middle/senior dev.

Malicious npm package steals Polymarket bots keys

https://sudonull.com/malicious-npm-package-steals-polymarket-bots-keys

Learn about the attack via the sleek-pretty package in npm: theft of API keys and SSH backdoors for Polymarket developers. How to protect bots and wallets — read the risk analysis and recommendations.

iOS and npm Exploits Leaks in March 2026

https://sudonull.com/ios-and-npm-exploits-leaks-in-march-2026

Breakdown of Key Cybersecurity Incidents: Coruna, DarkSword, Axios, Claude Code. Supply Chain Compromises and Regulations. For Developers — How to Protect CI/CD and Source Code. Read the Analysis.

CanisterWorm in npm: attack after Trivy

https://sudonull.com/canisterworm-in-npm-attack-after-trivy

Analysis of CanisterWorm worm: ICP C2, theft of npm tokens, systemd persistence. How to protect the supply chain from self-propagation. Analysis for developers.

From the web

npm | Home

https://www.npmjs.com/

Relied upon by more than 17 million developers worldwide, npm is committed to making JavaScript development elegant, productive, …

npm - npm

https://www.npmjs.com/package/npm

a package manager for JavaScript. Latest version: 12.0.2, last published: a month ago. Start using npm in your project by running …

Downloading and installing Node.js and npm | npm Docs

https://docs.npmjs.com/downloading-and-installing-node-js-and-npm/?ref=meilisearch-blog

To publish and install packages to and from the public npm registry or a private npm registry, you must install Node.js and the npm …

Download Node.js®

https://nodejs.org/en/download

Download Node.js® Get Node.js® v24.21.0 LTS for Windows using Chocolatey with npm Info Want new features sooner? Get the …

install | npm Docs

https://docs.npmjs.com/cli/v9/configuring-npm/install/?v=true

To publish and install packages to and from the public npm registry, you must install Node.js and the npm command line interface …

An introduction to the npm package manager | Node.js Learn

https://nodejs.org/learn/getting-started/an-introduction-to-the-npm-package-manager

npm is the standard package manager for Node.js. In September 2022 over 2.1 million packages were reported being listed in the …

What is npm - W3Schools

https://www.w3schools.com/whatis/whatis_npm.asp

The name npm (Node Package Manager) stems from when npm first was created as a package manager for Node.js. All npm …

Installing npm | Introduction

https://npm.github.io/installation-setup-docs/installing/index.html

Introduction 1. Installing npm 1.1. Using the Node Installer 1.1.1. A Note on Permissions 1.2. Using a Node Version Manager 1.3. …

GitHub - npm/cli: the package manager for JavaScript

https://github.com/npm/cli

Is "npm" an acronym for "Node Package Manager"? Contrary to popular belief, npm is not an acronym for "Node Package Manager." …

NPM - Wikipedia

https://en.wikipedia.org/wiki/NPM

This disambiguation page lists articles associated with the title NPM. If an internal link incorrectly led you here, you may wish to …

Trending Now