Hackernews posts about NPM

NPM is a package manager for JavaScript that allows developers to easily install and manage dependencies in their projects, serving as a central registry for millions of open-source packages.

1. Upcoming breaking changes for npm v12 (github.blog)
   484 points by plasma 27 days ago | 208 comments
2. Hide Secrets from AI Agents and NPM install using Airgap (sauleau.com)
   19 points by netgusto 17 days ago | 2 comments
3. Why Drizzle ORM couldn't publish new versions to NPM for a month (www.vlt.io)
   7 points by treve 11 days ago | discuss
4. NPM attack targets Zapier and security tool browser extensions (opensourcemalware.com)
   5 points by 6mile 18 days ago | 1 comments
5. I scored 200 blockchain NPM packages for deprecation and hijack risk (chain-audit.netlify.app)
   5 points by Heavensinfinite 19 days ago | discuss
6. Show HN: Nuts – pip/NPM for Java with first-class workspaces, JDK provisioning (github.com)
   4 points by thevpc 26 days ago | 2 comments
7. September 2025 NPM Attack Hit 2.6B Weekly Downloads. Most Found Out on Twitter (datanexusmcp.com)
   4 points by jsmudda 18 days ago | 1 comments
8. Multiple mastra NPM packages compromised (github.com)
   4 points by varunsharma07 20 days ago | 1 comments
9. GitHub pulls pin on NPM's auto-run scripts (www.theregister.com)
   4 points by MrDresden 26 days ago | discuss
10. Freedom from NPM. Happy 4th (www.npmjs.com)
    3 points by vasusen 2 days ago | 4 comments
11. Protecting your Supabase projects from NPM supply chain attacks (supabase.com)
    3 points by thinkingemote about 8 hours ago | 1 comments
12. >400 AUR Packages Compromised with NPM post-install malware (archlinux.org)
    3 points by lorenzohess 24 days ago | 1 comments
13. I Am Open Sourcing Hissab Calculator App, Skills, CLI and NPM (github.com)
    3 points by prenx4x 27 days ago | 1 comments
14. Protecting Supabase projects from NPM supply chain attacks (supabase.com)
    3 points by andrewstetsenko 11 days ago | discuss
15. Someone at NPM needs see this – to stop the madness (www.youtube.com)
    3 points by ascended 18 days ago | discuss
16. NPM-Scan: Detecting Six Major NPM Supply Chain Campaigns (June 2026) (www.npmjs.com)
    3 points by lateos-ai 29 days ago | discuss
17. Show HN: mtg-crucible, an NPM package to render custom Magic the Gathering cards (www.npmjs.com)
    2 points by CarlsJrMints 4 days ago | 1 comments
18. Cross-Language Detection of Malicious Packages in npm and PyPI (2023) [pdf] (www.acsac.org)
    2 points by vitorsr 23 days ago | 1 comments
19. Show HN: Runtime and install-time enforcement for NPM dependencies` (github.com)
    2 points by jackbeck 1 day ago | discuss
20. Show HN: AnythingLLM Fork as NPM Package (github.com)
    2 points by fred_terzi 4 days ago | discuss
21. Show HN: DepGuard, Visualize and simulate NPM vulnerability blast radiuses (github.com)
    2 points by DimitrissEgg1 9 days ago | discuss
22. Immobiliarelabs NPM packages have been compromised (github.com)
    2 points by varunsharma07 10 days ago | discuss
23. Incident review for TanStack NPM supply chain ransom incident (grafana.com)
    2 points by dboreham 11 days ago | discuss
24. I received a fake job offer. The NPM package was a full info-stealer (aydinnyunus.github.io)
    2 points by bobsoap 13 days ago | discuss
25. Show HN: Modelparams.dev: AI Model Parameters Database (UI, API, NPM) (modelparams.dev)
    2 points by brunaxLorax 18 days ago | discuss
26. MCP-customs: NPM audit, but for MCP servers (github.com)
    2 points by mcpcustoms 19 days ago | discuss
27. Mastra NPM Supply Chain Attack: 140 Packages Backdoor via easy-day-JS Typosquat (www.stepsecurity.io)
    2 points by shaunpud 20 days ago | discuss
28. Show HN: TraceTree – Sandboxed behavioral analysis for NPM and PyPI packages (github.com)
    1 points by Tejas_dmg 1 day ago | discuss
29. NPM staged publishing for supply-chain security (nuqs.dev)
    1 points by franky47 5 days ago | discuss
30. @esbuild-kit/* packages on NPM Seems Hacked
    1 points by viztor 9 days ago | discuss