โ† ์ตœ์‹  ํ”„๋กœ๋•ํŠธ

Tips to stay safe from NPM supply chain attacks

[Updated for AI ๐Ÿค–] Continuous updates on how to stay safe from NPM supply chain attacks.

์˜คํ”ˆ์†Œ์Šค

858 ์Šคํƒ€ ยท GitHub์™ธ๋ถ€ ์‚ฌ์ดํŠธ

github.com ๋ฐฉ๋ฌธ์™ธ๋ถ€ ์‚ฌ์ดํŠธ

๋ฐ˜์‘ (1)

๋น„์Šทํ•œ ํ”„๋กœ๋•ํŠธ

์„ค๋ช…์ด ๋น„์Šทํ•œ ์ˆœ

  1. Socket web extension

    chrome.google.com

    free NPM supply chain protection

    Hacker News10์ 

  2. Safe-install

    npmjs.com

    safer NPM installs with trusted build dependencies

    Hacker News19์ 

  3. Safe-NPM

    github.com

    only install packages that are +90 days old

    Hacker News90์ 

  4. Tilth

    github.com

    I spent tokens so my agents would stop wasting them (~4k Rust)

    Hacker News10์ 

  5. DepsGuard

    github.com

    One command to harden NPM/pnpm/yarn/bun/uv configs

    Hacker News40์ 