Skip to content

Tag

Vibe Coding & Npm

Tutorials, guides, and deep dives on npm for AI-assisted development.

5 articles

Mini Shai-Hulud npm Attack Targets Your Claude Code Config

Mini Shai-Hulud hijacked Claude Code's SessionStart hook as a persistence vector in May 2026. If you ran npm install recently, here is your cleanup checklist.

Updating Dependencies Safely on a Quarterly Routine

Update npm dependencies safely with a quarterly routine. Check for vulnerabilities, test upgrades, handle breaking changes, and automate with Dependabot.

Slopsquatting and How AI Invents npm Packages That Hurt You

Slopsquatting explained: AI tools hallucinate fake npm packages that attackers register with malware. Learn how to detect and prevent this supply chain attack.

Third-Party Dependency Security and How to Audit npm Packages

Audit your npm dependencies for security risks. Learn to spot vulnerable packages, detect slopsquatting attacks, and keep your vibe-coded app's supply chain safe.

What Is npm and How Developers Share Code Building Blocks

npm is the package manager that lets you install pre-built code libraries in seconds. Learn how it works, why AI tools rely on it, and how to stay safe.

Related tags

Security2Supply Chain2Dependencies2Claude Code1Developer Security1Maintenance1Slopsquatting1Packages1Fundamentals1Javascript1

The Tuesday Shipping Report

Every Tuesday, one focused email:

  • - The tool or technique that's actually working right now
  • - A real problem from the community (and how to solve it)
  • - What changed this week in the vibe coding landscape

Read by 1,000+ founders, developers, and creators building with AI. Free forever. No spam.