npm security

2 articles

Bumblebee Tutorial: Scan Your Dev Machine for Supply Chain Risks

How to install and use Bumblebee, Perplexity's open-source scanner for npm, MCP configs, and extensions. Real commands, scan profiles, and incident response setup.

Jun 21, 202624 min readZeeshan Tofiq

security

Source Maps Are Leaking Your Code: How to Stop It in Your npm Packages

Source maps with sourcesContent can leak your entire codebase. Learn how to disable them per bundler, audit with npm pack, and automate the check in CI.

Jun 21, 202617 min readZeeshan Tofiq