Hackernews posts about NPM

NPM is a package manager for JavaScript that allows developers to easily install and manage dependencies in their projects, serving as a central registry for millions of open-source packages.

1. Lotusbail npm package found to be harvesting WhatsApp messages and contacts (www.koi.ai)
   323 points by sohkamyung 10 days ago | 211 comments
2. I used Claude to revive an NPM package with 760K downloads/wk last updated 2019 (github.com)
   13 points by greenstevester 1 day ago | 6 comments
3. Show HN: tpmjs - npm for ai sdk tools (tpmjs.com)
   5 points by thomasfromcdnjs 5 days ago | 1 comments
4. Bash script to vendor in NPM packages to your repo (gist.github.com)
   4 points by dangoodmanUT 6 days ago | 1 comments
5. I don't trust NPM install, so I built dev (github.com)
   4 points by f0i 7 days ago | 1 comments
6. Show HN: Enact – NPM for AI Tools with Sigstore and Dagger (enact.tools)
   3 points by kgroves88 22 days ago | 1 comments
7. NPM Revokes Classic Tokens, as OpenJS Warns Maintainers About OIDC Gaps (socket.dev)
   3 points by feross 22 days ago | 1 comments
8. Forge: C's NPM and HTTP framework (Pure C99, zero deps)
   3 points by Subrata_Roy 2 days ago | discuss
9. NPM needs an analog to pnpm's minimumReleaseAge and yarn's npmMinimalAgeGate (www.pcloadletter.dev)
   3 points by ronbenton 4 days ago | discuss
10. NPM classic tokens revoked, session-based auth and CLI token management now (github.blog)
    3 points by sdko 23 days ago | discuss
11. Friendly reminder: NPM classic tokens will be revoked today
    3 points by valtlfelipe 23 days ago | discuss
12. NPM.watch: Track NPM Downloads, Package Safety and Live Stats (www.npm.watch)
    2 points by Next-Icons 22 days ago | 1 comments
13. Show HN: I built a service to fix NPM's email flood problem (npmdigest.com)
    2 points by dgellow 19 days ago | discuss
14. Releasing Packages with a Valet Key: NPM, PyPI, and Beyond (byk.im)
    1 points by BYK 23 days ago | 1 comments
15. npm registry down
    1 points by arbol 27 days ago | 1 comments
16. Show HN: NPM package size visualizer using React as the unit of measurement (howmanyreacts.com)
    1 points by Sajarin 14 days ago | discuss
17. No more tokens Locking down NPM Publish Workflows (www.zachleat.com)
    1 points by gregwolanski 23 days ago | discuss
18. Why Scanners Fail in Practice: Lessons from the Shai-Hulud Attacks on NPM (www.codecentric.de)
    1 points by F30 23 days ago | discuss
19. New Elf-Stats Malware Campaign on NPM (www.npmjs.com)
    1 points by eyberg 29 days ago | discuss
20. Show HN: Vibium – Browser automation for AI and humans, by Selenium's creator (github.com)
    440 points by hugs 8 days ago | 124 comments
21. Show HN: Ez FFmpeg – Video editing in plain English (npmjs.com)
    417 points by josharsh 5 days ago | 197 comments
22. Show HN: Stop AI scrapers from hammering your self-hosted blog (using porn) (github.com)
    373 points by misterchocolat 16 days ago | 277 comments
23. Show HN: TinyPDF – 3kb pdf library (70x smaller than jsPDF) (github.com)
    253 points by lulzx 14 days ago | 33 comments
24. Launch HN: Nia (YC S25) – Give better context to coding agents (www.trynia.ai)
    131 points by jellyotsiro 24 days ago | 87 comments
25. Show HN: Pbnj – A minimal, self-hosted pastebin you can deploy in 60 seconds (pbnj.sh)
    69 points by bhavnicksm 27 days ago | 18 comments
26. Show HN: Xkcd #2347 lived in my head, so I built the dependency tower for real (stacktower.io)
    36 points by matzehuels 28 days ago | 5 comments
27. Show HN: EdgeVec – Sub-millisecond vector search in the browser (Rust/WASM) (github.com)
    7 points by matteo1782 20 days ago | 3 comments
28. Console.text() – SMS alerts when code executes
    6 points by Noel04 21 days ago | 16 comments
29. Show HN: ISON – Data format that uses 30-70% fewer tokens than JSON for LLMs (github.com)
    6 points by maheshvaikri99 6 days ago | 13 comments
30. Show HN: Domain Search MCP – AI-powered domain availability checker (github.com)
    6 points by dorukardahan 6 days ago | 4 comments