TokenPost topic

npm

2 TokenPost stories are tagged npm. The newest appear first.

Latest npm stories

• OpenSourceMalware Flags Private Repositories in Crypto Hiring

  A `.npmrc` file can route package installation to a specified external registry, where malicious code may run.

  Oct 23, 2026, 6:12 PM EDT · Technology

• SlowMist Flags Malicious Code in MemTensor Packages Across PyPI and npm

  SlowMist flagged releases that execute built-in Go binaries when imported or launched, exposing developer credentials and potentially user prompts.

  Sep 24, 2026, 8:37 AM EDT · Technology