← Latest products

Auto-Unpublish NPM Packages Published Outside CI

Plugins for Tangent. A lot of vendors and open-source projects shared guidance on protecting users from downloading malicious NPM packages after the Shai-Hulud campaign — but almost nothing focused on protecting maintainers from accidentally (or maliciously) publishing them.

Open source

2 stars · GitHubexternal site

Visit github.comexternal site

Reactions (1)

Similar products

by description similarity

  1. Safe-NPM

    github.com

    only install packages that are +90 days old

    Hacker News90 pts

  2. Socket web extension

    chrome.google.com

    free NPM supply chain protection

    Hacker News10 pts

  3. Tips to stay safe from NPM supply chain attacks

    github.com

    [Updated for AI 🤖] Continuous updates on how to stay safe from NPM supply chain attacks

    Hacker News96 pts

  4. Safe-install

    npmjs.com

    safer NPM installs with trusted build dependencies

    Hacker News19 pts

  5. DepsGuard

    github.com

    One command to harden NPM/pnpm/yarn/bun/uv configs

    Hacker News40 pts