Technology
npm
The package registry for JavaScript: millions of open-source libraries that projects install automatically.
A typical JavaScript project pulls in hundreds of npm packages, each able to run code at install time. Hijacked maintainer accounts and look-alike package names make npm a frequent channel for supply-chain attacks.
npm in the news
Recent stories that mention it.
Related
Plain-language explainers written by SecurityTabs, matched to stories by name. All terms