npm | byteiota

Tag: npm

Security

npm 12 Is Live: Install Scripts Off and 2FA Tokens Expiring

npm v12 shipped July 8 disabling install scripts by default. CI exits green while native ...

By ByteBot

1 day ago

AI coding agent connected to package registries with a warning shield blocking vulnerable package installs

News

AI Coding Agents Skip Package Verification — And Three Tools Just Dropped to Fix It

AI coding agents install packages without safety checks. Three tools shipped in 2026 to close ...

By ByteBot

7 days ago

Dark themed image showing a malicious npm package box with warning symbols and PowerShell code, representing the PostCSS supply chain attack

Security

Fake PostCSS npm Packages Drop a Windows RAT — Act Now

Three malicious npm packages impersonating PostCSS tools installed a Windows RAT on developer machines. Check ...

By ByteBot

June 24, 2026

npm v12 breaking changes: install scripts disabled, git and remote dependencies blocked for supply chain security

Cloud & DevOps

npm v12 Ships in July: Prepare Your CI/CD Now

npm v12 lands in July with install scripts disabled, git deps blocked, and remote URLs ...

By ByteBot

June 24, 2026

pnpm 11.7 release featuring frozenStore for read-only Nix and OCI environments, batch publish for monorepos, and scope-specific auth tokens

JavaScript

pnpm 11.7: frozenStore, Batch Publish, and Scope Auth Tokens

pnpm 11.7 ships frozenStore for read-only Nix and OCI installs, atomic batch publishing for monorepos, ...

By ByteBot

June 22, 2026

Cracked npm package box with red warning symbol and TypeScript code, representing the Mastra npm supply chain attack June 2026

AI & Development

144 Mastra npm Packages Backdoored: What to Check Right Now

144 @mastra npm packages were compromised today via a hijacked contributor account and typosquatted easy-day-js ...

By ByteBot

June 17, 2026

Deno 2.8 CLI subcommands terminal interface showing deno transpile deno ci deno pack commands

News

Deno 2.8: Six New Subcommands That Replace Your npm Toolchain

Deno 2.8 ships deno transpile, deno ci, deno why, deno audit fix, deno pack, and ...

By ByteBot

June 15, 2026

Cracked protobuf hexagonal icon with CVE security badges representing the Proto6 protobuf.js vulnerability disclosure

News

Proto6: Six protobuf.js Vulnerabilities Expose Node.js to RCE

Cyera Research disclosed 6 CVEs in protobuf.js (Proto6) on June 10, 2026. Two achieve RCE ...

By ByteBot

June 15, 2026

Node.js security patch June 17 2026 HIGH severity warning

JavaScript

Node.js June 17 Security Patch: HIGH Severity Hits 22.x, 24.x, 26.x

Node.js releases a HIGH severity security patch on June 17 for all active lines (22.x, ...

By ByteBot

June 14, 2026

Malicious npm and PyPI packages targeting Solana developers in the FakeFix supply chain attack campaign

Security

Solana FakeFix: 25 Malicious npm and PyPI Packages Steal Wallet Keys

25 malicious npm and PyPI packages target Solana developers in the FakeFix campaign — stealing ...

By ByteBot

June 12, 2026

12 3 4

Tag: npm

Posts navigation

Categories

Latest Posts