Back to home

Tag

npm

npm is the default distribution layer for JavaScript packages, and often the first place supply-chain mistakes show up. This tag tracks release errors, sourcemap leaks, dependency contamination, and packaging details that can expose internal code or debug assets.

4 articles

Claude Code’s hidden checks expose a bad habit
Tools & Apps/Jul 8

Claude Code’s hidden checks expose a bad habit

I break down the hidden Claude Code checks, why they spooked me, and the exact review checklist I’d use instead.

7 ways to install OpenClaw
Industry News/Jun 4

7 ways to install OpenClaw

7 install paths for OpenClaw, from one-line scripts to Docker, plus checks for Node 24 and Windows setup.

Claude Code Source Map Leak: What Happened
Tools & Apps/Apr 2

Claude Code Source Map Leak: What Happened

Anthropic shipped a 59.8 MB source map in Claude Code 2.1.88 on npm, exposing internal code details to anyone who pulled it.

Claude Code Leak Exposes 512K Lines on npm
Tools & Apps/Apr 2

Claude Code Leak Exposes 512K Lines on npm

Anthropic confirmed a packaging error exposed Claude Code source on npm, revealing 512,000+ lines and new supply-chain risks.