#npm

What ChainDrop teaches us about credential theft, self-propagating npm malware, and practical supply-chain defenses.

Why package publishing is moving from long-lived npm tokens toward short-lived credentials.

A review of the Nx S1ngularity attack and the protections frontend teams can actually apply.

What Node.js 24 changes for Vite, Next.js, testing, CI, and frontend development environments.