NPM, the standard package manager used with Node.js, enjoyed a 2.0 release this past week. Outfitted with new features and fixes, its release process has also been revised to satisfy both those ...

In what is being called the largest supply chain attack in history, attackers have injected malware into NPM packages with ...

Most JavaScript developers are familiar with the npm package manager, which was originally developed by Isaac Schlueter. What many probably don't know is ...

npm, Inc. has also launched npm Private Modules, a long-awaited feature of the platform that enables developers to share and re-use private and confidential code. Pricing plans for npm Private ...

Certified Modules will be a fee-based service, with the price starting at $1,000 per month for up to 50 users. Accessing the service requires changing a line in the user’s NPM configuration.

The node-ipc developer attempt to protest Russia's attack on Ukraine has the unintended consequence of casting more doubt in software supply chain integrity.