Neowin News Feed for: Npm

JavaScript devs beware: this very popular NPM package has been compromised by attackers

David Uzondu — Tue, 31 Mar 2026 05:24:02 +0000

An extremely popular NPM package used in many JavaScript projects has been compromised and can wreak havoc on your machine if installed. Read more...

Over 300 npm packages compromised by self-replicating worm

David Uzondu — Wed, 17 Sep 2025 01:10:01 +0000

A new piece of malware is spreading through the popular tinycolor NPM library and more than 300 other packages, some of which belong to CrowdStrike. Read more...

GitHub increases verifiability of npm packages for added security

Paul Hill — Thu, 20 Apr 2023 02:12:02 +0000

GitHub now allows npm package developers to link their published packages to their source code to prove that the package was built from the source. This will help build trust and boost security. Read more...

Package Analysis Project: Google will help detect malicious open source packages

Usama Jawad — Fri, 29 Apr 2022 07:58:01 +0000

Google has pledged support for OpenSSF's Package Analysis Project for open source packages uploaded to popular repositories. It has also published the results which paint a rather interesting picture. Read more...

Free eBook: Your First Week With Node.js

News Staff — Thu, 01 Oct 2020 20:00:01 +0000

This free to download eBook will get you up and running with guides on when to use Node, NPM, Security, as well as connecting with MySQL, MongoDB and more. Claim before offer expires! Read more...

Microsoft Weekly: More Series X specs, more updates, and more user growth

Florin Bodnarescu — Sun, 22 Mar 2020 14:56:01 +0000

This week we saw the full spec sheet of the Xbox Series X and the features of the controller, Windows 10 finally crossed the one billion active device mark, and much more. Be sure to catch up below. Read more...

GitHub acquires JavaScript package manager npm

João Carrasqueira — Mon, 16 Mar 2020 19:00:01 +0000

Microsoft's GitHub has announced that it's acquiring npm, a popular package manager for JavaScript applications that's been available for over 10 years. The value of the transaction wasn't disclosed. Read more...

Microsoft takes the wraps off TypeScript 3.0, now generally available

Boyd Chan — Tue, 31 Jul 2018 11:38:01 +0000

Almost two years after its last major revision to the programming language, TypeScript 3.0 has been unleashed by Microsoft with editor support available for Visual Studio 2015, 2017, and Code. Read more...

TypeScript 2.0 now generally available

Shreyas Gandhe — Sat, 24 Sep 2016 19:04:01 +0000

Microsoft has announced the availability of the final version of the TypeScript 2.0 programming language, which can be downloaded from NuGet or Node Package Manager. Read more...

TypeScript 2.0 nears launch, Release Candidate now available

Shreyas Gandhe — Wed, 31 Aug 2016 19:54:01 +0000

Microsoft has announced the availability of the release candidate of the TypeScript 2.0 programming language, which can be downloaded from NuGet or Node Package Manager. Read more...