npm

Developers implement four-step npm supply chain protection configuration to defend against malicious package attacks. Configuration adds minimum release age cooldowns and enforces exact package pinning.

Anthropic’s Claude Code had its entire source code — 1,900 files and 512,000+ lines — accidentally exposed via a source map file in the npm registry. Here’s what was inside and what every developer should learn from it.