Skip to content

DEV Community

npm supply chain Series' Articles

Back to Pico's Series

Pico

Jun 15

npm audit says you're clean. It doesn't check who can push to your dependencies.

#javascript #security #npm #node

3 min read

Pico

Jun 15

IronWorm Commits as 'claude.' It Steals Your Anthropic and OpenAI Keys.

#security #supplychain #ai #npm

3 min read

Pico

Jun 15

323 npm Packages Compromised in 39 Minutes. The Malware Installs a Claude Code SessionStart Hook.

#npm #security #supplychain #claudecode

4 min read