Skip to content

Socket Blog company blog

NPM to implement staged publishing after turbulent shift off classic tokens

socket.dev

Read on socket.dev → Discuss on HN (125) Archived copy

The original page did not respond normally when we last checked (HTTP 403). The archived copy may help.

Points: 205
HN comments: 125
Submissions: 1
Cited by: 0 commenters

Software Engineering Open Source 2026

On Hacker News

Submitted	Title on HN	Points	Comments
Jan 7, 2026	NPM to implement staged publishing after turbulent shift off classic tokens by feross	205	125

More from Socket Blog

All 7 posts →

Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised

20251,233 points1,019 comments Security & Privacy details

Bitwarden CLI compromised in ongoing Checkmarx supply chain campaign

2026872 points432 comments Security & Privacy details

Trivy under attack again: Widespread GitHub Actions tag compromise secrets

2026250 points83 commentscited by 4Security & Privacy details

The Everything NPM Package

2024192 points151 comments Software Engineering details

The push to ban ransom payments is gaining momentum

2024127 points166 comments Security & Privacy details

Social engineering campaign targeting tech employees spreads through NPM malware

2023114 points87 comments Security & Privacy details

Related posts from the same era

Ghostty is leaving GitHub

Mitchell Hashimoto20263,521 points1,051 commentscited by 3 details

Astra can read and write weights to improve Qwen

Rikiya Takehi20262,955 points896 comments details

Git commands I run before reading any code

Principal Software Engineer & Codebase Rescue20262,338 points509 comments details

Uv is the best thing to happen to the Python ecosystem in a decade

Dr. Emily L. Hunt20252,214 points1,324 comments details

Anthropic acquires Bun

Bun Blog20252,192 points1,072 commentscited by 7 details

Zed 1.0

Zed Blog20262,153 points690 comments details