🏢 npm Organization

Socket’s threat research team uncovered a new PyPI wave tied to the broader Mini Shai-Hulud, Miasma, and Hades supply chain campaign. The latest wave adds 23 newly identified package-version artifacts

Bitwarden CLI was compromised in a supply chain attack tied to the ongoing Checkmarx campaign, according to JFrog and Socket. The affected release was **@bitwarden/cli@2026.4.0**, which contained mali

On March 30, hackers compromised a lead maintainer's npm account for the popular Axios library, releasing two malicious versions that included a hidden dependency, plain-crypto-js@4.2.1, designed to i

Vite+ is a unified toolchain designed to streamline web development by managing the runtime, package manager, and frontend stack in one tool. It is free and open-source, licensed under the MIT license

Vite 8.0 has been officially released, marking a significant evolution in the Vite ecosystem. Previously reliant on two separate bundlers—esbuild for development and Rollup for production—Vite now int

The Twelve-Factor App methodology, established in 2011 by Heroku, outlines twelve principles for developing software-as-a-service applications that are portable and resilient. As of 2026, many of thes

The article discusses the speed of the `uv` package manager, which installs packages faster than `pip`, emphasizing that its performance is not solely attributed to being written in Rust. Key design d