🧰 npm audit

The items that name it 6

• The React Native Developer's Security Guide
  repo2026-09-05

  Dependency vulnerability auditing, discussed in the context of triaging results in a React Native tree (Appendix H)

• NPM Isn't Prepared For North Korean PolinRider Attack
  writeup2026-08-25

  npm's built-in vulnerability/advisory checking tool referenced as relying on GHSA feed

• npm-scan
  repo2026-08-05

  Traditional CVE database checking tool, described as missing behavioral supply chain attacks

• The upgrade trap: when upgrading is the wrong answer to a CVE
  article2026-07-22

  Dependency vulnerability scanning tool; flagged lodash CVEs and reported 'no fix available'

• Thinkst Package Proxy
  tool2026-06-26

  npm command allowed a bypass path in Package Proxy's default config to see latest packages for critical fix steps

• VICE
  repo2026-06-14

  dependency vulnerability check run as part of VICE's local audit