NPM's Spam Crisis: 70% of new packages from last 6 months were spam

Also explore 101 React best practices, a free roadmap to mastering web components, and why your Intel CPU may be crashing. ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ [SitePoint logo](~/AAAHUQA~/RgRonJ53P0UgM2UwOTJhNTNlMDczNGJlMDJjZjYyNGI2OTZlYmYxYjJEFGh0dHBzOi8vc2l0ZXBvbnQuY29tVwVzcGNldUIKZq13GbpmJWNg71IbdHJpc3RyYW1iYWxkd2luOTFAZ21haWwuY29tWAQAAGQd) August 12th, 2024 | [Read Online](~/AAAHUQA~/RgRonJ53P0TbaHR0cHM6Ly9iZXJyaW1hLmVvY2FtcGFpZ24xLmNvbS93ZWItdmVyc2lvbj9lcD0yJmxjPTg3MDdlZTg2LTUyZjAtMTFlZS1hZjUyLTRiNTM4MmJhM2I5NCZwPTIxMzM1YWI4LTUzNDAtMTFlZi04YjY5LTUxYThiNzA5NjFhYiZwdD1jYW1wYWlnbiZ0PTE3MjM0NzIyNDcmcz1jZjRjMWEzNmRmZjQ1NTJkMTNjNzM0NmU0NDhjNmExZjBiYjBjYjU5NTAzM2ZlYmU4NGZhOTkwZThiNDhmYjdjVwVzcGNldUIKZq13GbpmJWNg71IbdHJpc3RyYW1iYWxkd2luOTFAZ21haWwuY29tWAQAAGQd) SitePoint Source Welcome, Developers! 👋 This week, we check out the worrisome trend of increasing pollution in the npm ecosystem. Over 600k packages in the last 6 months being spam, this sheer volume and potential to conceal harmful code is alarming. And we certainly don't want to imagine AI models being trained on npm data and suggesting any of these spam packages. Beyond npm, we also check out a comprehensive list of 101 tips for React devs, a roadmap to learning web components, and news about crashing Intel CPUs & Reddit's shenanigans. Let's dive in ☕ From our Sponsor: Buildkits ~/AAAHUQA~/RgRonJ53P0UgOGVjZWE4YzViMjRkY2Y5MjNiZmU3ZWJiODk5OTExMDlEGmh0dHBzOi8vd3d3LmJ1aWxka2l0cy5kZXYvVwVzcGNldUIKZq13GbpmJWNg71IbdHJpc3RyYW1iYWxkd2luOTFAZ21haWwuY29tWAQAAGQd 🚀 The ultimate marketplace for SaaS boilerplates Boilerplates help you ship faster and smarter, so you can focus on what truly matters – building great products. Our marketplace features over 150 boilerplates across diverse stacks, including Next.js, Laravel, Django, and more. Say goodbye to starting from scratch, and find your ideal boilerplate here. [Get started now](~/AAAHUQA~/RgRonJ53P0UgOGVjZWE4YzViMjRkY2Y5MjNiZmU3ZWJiODk5OTExMDlEGmh0dHBzOi8vd3d3LmJ1aWxka2l0cy5kZXYvVwVzcGNldUIKZq13GbpmJWNg71IbdHJpc3RyYW1iYWxkd2luOTFAZ21haWwuY29tWAQAAGQd) # # # # # # 🗑️ The Great npm Garbage Patch Crypto rewards gone wild? Phylum's latest research estimates 613,000-667,000 spam packages published to npm in six months, this comes out to be nearly 5 out of 7 new packages being spam. The cause is linked to Tea protocol's "Proof of Contribution" system that aims to reward open-source software contributions. Phylum team compares the spam to the "[Great Pacific Garbage Patch](~/AAAHUQA~/RgRonJ53P0UgMGY3ODRjNjYzYjVkMzAyMDNjYmY3YjhjZTAwMTMzNThETmh0dHBzOi8vZWR1Y2F0aW9uLm5hdGlvbmFsZ2VvZ3JhcGhpYy5vcmcvcmVzb3VyY2UvZ3JlYXQtcGFjaWZpYy1nYXJiYWdlLXBhdGNoL1cFc3BjZXVCCmatdxm6ZiVjYO9SG3RyaXN0cmFtYmFsZHdpbjkxQGdtYWlsLmNvbVgEAABkHQ~~)" and highlights several risks. [By Phylum Research Team →](~/AAAHUQA~/RgRonJ53P0UgOTQxOGNhNjc3NTViNWU4MmNjOTU5Mzc4NTlkOTkzMmFEM2h0dHBzOi8vYmxvZy5waHlsdW0uaW8vdGhlLWdyZWF0LW5wbS1nYXJiYWdlLXBhdGNoL1cFc3BjZXVCCmatdxm6ZiVjYO9SG3RyaXN0cmFtYmFsZHdpbjkxQGdtYWlsLmNvbVgEAABkHQ~~) # # ✨ 101 React Tips & Tricks For Beginners To Experts Level up your React game with 101 React best practices for developers of all levels. Tips cover components, state management, hooks, TypeScript, and more. [By Ndeye Fatou Diop →](~/AAAHUQA~/RgRonJ53P0UgMzQwMTgxMjdjZTZjNjVjNWJmY2UzYjU5NTczZTE2MWVEUmh0dHBzOi8vZGV2LnRvL19uZGV5ZWZhdG91ZGlvcC8xMDEtcmVhY3QtdGlwcy10cmlja3MtZm9yLWJlZ2lubmVycy10by1leHBlcnRzLTRtMTFXBXNwY2V1QgpmrXcZumYlY2DvUht0cmlzdHJhbWJhbGR3aW45MUBnbWFpbC5jb21YBAAAZB0~) # # 💻 Intel's Crashing 13th and 14th Gen CPUs If you or your organization have been using Intel's 13th/14th gen chips, there's a chance you're facing instability or blue screens. It's happening to others too, and not just you. Unfortunately, not much you can do except update BIOS to possibly mitigate further damage and claim warranty. Intel did announce [extended warranty](~/AAAHUQA~/RgRonJ53P0UgODQ0M2UzOTg5NmQ3MzYxOWMxZjUyOTIwYWE4YzA2ODNEzmh0dHBzOi8vd3d3LnRvbXNoYXJkd2FyZS5jb20vcGMtY29tcG9uZW50cy9jcHVzL2ludGVsLWFubm91bmNlcy1hbi1leHRyYS10d28teWVhcnMtb2Ytd2FycmFudHktZm9yLWl0cy1jaGlwcy1hbWlkLWNyYXNoaW5nLWFuZC1pbnN0YWJpbGl0eS1pc3N1ZXMtbG9uZ2VyLXdhcnJhbnR5LWFwcGxpZXMtdG8tMTN0aC1hbmQtMTR0aC1nZW4tY29yZS1wcm9jZXNzb3JzVwVzcGNldUIKZq13GbpmJWNg71IbdHJpc3RyYW1iYWxkd2luOTFAZ21haWwuY29tWAQAAGQd) for affected CPUs, but this is a huge disaster nonetheless. [By Sean Hollister →](~/AAAHUQA~/RgRonJ53P0UgNjY2M2M3ZGQwNjhiMmU2OTlmMmVjM2E5N2I0ZmEzZTJEZGh0dHBzOi8vd3d3LnRoZXZlcmdlLmNvbS8yMDI0LzcvMjYvMjQyMDY1MjkvaW50ZWwtMTN0aC0xNHRoLWdlbi1jcmFzaGluZy1pbnN0YWJpbGl0eS1jcHUtdm9sdGFnZS1xLWFXBXNwY2V1QgpmrXcZumYlY2DvUht0cmlzdHJhbWJhbGR3aW45MUBnbWFpbC5jb21YBAAAZB0~) 🌐 Learn Web Components Andrico has built a comprehensive, free roadmap for mastering web components with an amazing UI that's worth checking out. It's a curated collection of articles covering essential topics like HTML, CSS, JavaScript, Custom Elements, Shadow DOM, and Accessibility. [By Andrico Karoulla →](~/AAAHUQA~/RgRonJ53P0UgOGMwZjZkODQ5M2EzNGQxMTBiYzhkMDc1Y2QzZmVhMWFEFmh0dHBzOi8vbGVhcm4td2NzLmNvbS9XBXNwY2V1QgpmrXcZumYlY2DvUht0cmlzdHJhbWJhbGR3aW45MUBnbWFpbC5jb21YBAAAZB0~) # # 🚫 Non-Google Search Engines Blocked From Showing Recent Reddit Results Bad news for Bing, DuckDuckGo and Yandex users as you'll no longer be able to find the latest reddit threads on search. Searching your problem and throwing "reddit" at the end wouldn't work for new threads now unless you're using Google. [By Scharon Harding →](~/AAAHUQA~/RgRonJ53P0UgMThlNTlmNzZlZjhlNWZkYTIyYjc3ZjBhOWE0YWEyMTZEbWh0dHBzOi8vYXJzdGVjaG5pY2EuY29tL2dhZGdldHMvMjAyNC8wNy9ub24tZ29vZ2xlLXNlYXJjaC1lbmdpbmVzLWJsb2NrZWQtZnJvbS1zaG93aW5nLXJlY2VudC1yZWRkaXQtcmVzdWx0cy9XBXNwY2V1QgpmrXcZumYlY2DvUht0cmlzdHJhbWJhbGR3aW45MUBnbWFpbC5jb21YBAAAZB0~) 🧰 The Toolbox Tools and products we're excited about today: # # # # Stack Auth (YC S24) Open-source Auth0/Clerk alternative. Stack Auth is managed user authentication & authorization. It is developer-friendly and fully open-source & self-hostable. Within 5 minutes, you can setup Stack and use its components such as and . [Learn more →](~/AAAHUQA~/RgRonJ53P0UgODZlOGVhM2I5NDA3YTE3ODIzMjA4MjA5YTM4MzZjZmNEM2h0dHBzOi8vd3d3LnByb2R1Y3RodW50LmNvbS9wb3N0cy9zdGFjay1hdXRoLXljLXMyNFcFc3BjZXVCCmatdxm6ZiVjYO9SG3RyaXN0cmFtYmFsZHdpbjkxQGdtYWlsLmNvbVgEAABkHQ~~) Cookie Checker Free cookie checker tool for your websites. This audit tool checks if you have stored cookies, and have 3rd party domains on the site to determine your site’s compliance with GDPR. [Learn more →](~/AAAHUQA~/RgRonJ53P0UgMTM2MTllZDM0MzVjODM4ODdjN2NlMDk1OTAxMmIyNDBEMGh0dHBzOi8vd3d3LnByb2R1Y3RodW50LmNvbS9wb3N0cy9jb29raWUtY2hlY2tlclcFc3BjZXVCCmatdxm6ZiVjYO9SG3RyaXN0cmFtYmFsZHdpbjkxQGdtYWlsLmNvbVgEAABkHQ~~) Anyquery Query anything with SQL. It uses SQLite under the hood and can act as a MySQL server so that you can connect BI tools. It supports querying JSON, CSV, Parquet, Airtable, Google Sheets, Notion databases, Gmail and much more. [Learn more →](~/AAAHUQA~/RgRonJ53P0UgYjA4ZGViNDczN2NjZTBiMWFhNGU4YzAzNDVlYzQ3MTVEKmh0dHBzOi8vd3d3LnByb2R1Y3RodW50LmNvbS9wb3N0cy9hbnlxdWVyeVcFc3BjZXVCCmatdxm6ZiVjYO9SG3RyaXN0cmFtYmFsZHdpbjkxQGdtYWlsLmNvbVgEAABkHQ~~) ~/AAAHUQA~/RgRonJ53P0UgYTdjNmFmMDEwMzQwYjRkY2EwNmFjZjkwZGY1ZjMwY2REmGh0dHBzOi8vbWwuc2l0ZXBvaW50LmNvbS9saW5rL2MvWVQweU16RXhOemMyTmprMk5UZzFOREkyT1RrMkptTTlhVEp5TUNabFBUQW1ZajB4TWpFeE5qUXdOVGs1Sm1ROVpqWnJOM1V6YWc9PS5RcndWOWk0QWI0a0RRVndLRnU4Sk1QUnFQVUNPZk50blNGREwtMXBNQU1vVwVzcGNldUIKZq13GbpmJWNg71IbdHJpc3RyYW1iYWxkd2luOTFAZ21haWwuY29tWAQAAGQd 🚀 The ultimate marketplace for SaaS boilerplates Boilerplates help you ship faster and smarter, so you can focus on what truly matters – building great products. Our marketplace features over 150 boilerplates across diverse stacks, including Next.js, Laravel, Django, and more. Say goodbye to starting from scratch, and find your ideal boilerplate here. [Get started for free →](~/AAAHUQA~/RgRonJ53P0UgOGVjZWE4YzViMjRkY2Y5MjNiZmU3ZWJiODk5OTExMDlEGmh0dHBzOi8vd3d3LmJ1aWxka2l0cy5kZXYvVwVzcGNldUIKZq13GbpmJWNg71IbdHJpc3RyYW1iYWxkd2luOTFAZ21haWwuY29tWAQAAGQd) Come say hi! SitePoint’s community is a place where you can come to talk tech, development, and design. Join us today and get involved with other members who share your interests in tech! [Join now →](~/AAAHUQA~/RgRonJ53P0UgNDFlZmZhYWI1Y2MyZGU3NWIwYTk2OTBmNzY2MGY1ZWJEJGh0dHBzOi8vd3d3LnNpdGVwb2ludC5jb20vY29tbXVuaXR5L1cFc3BjZXVCCmatdxm6ZiVjYO9SG3RyaXN0cmFtYmFsZHdpbjkxQGdtYWlsLmNvbVgEAABkHQ~~) That's a wrap for today! Let us know how you felt about today's newsletter. ~/AAAHUQA~/RgRonJ53P0UgM2Q3OGFkNTQwNzI5YWM1YjNiZGYxN2Q2NzdmZTcwOTdEWWh0dHBzOi8vZm9ybS50eXBlZm9ybS5jb20vdG8vdTVEQ3B0QkcjYW5zd2Vycy1ob3dfZGlkX3lvdV9mZWVsPTAxSFdUSE40WUtXVzVGQkhOQ0NDVllDSFYxVwVzcGNldUIKZq13GbpmJWNg71IbdHJpc3RyYW1iYWxkd2luOTFAZ21haWwuY29tWAQAAGQd ~/AAAHUQA~/RgRonJ53P0UgZDE5ODRkMjQzMzBjOWEyZDY2NzQ5NTMyMjJjNDA5MDJEWWh0dHBzOi8vZm9ybS50eXBlZm9ybS5jb20vdG8vdTVEQ3B0QkcjYW5zd2Vycy1ob3dfZGlkX3lvdV9mZWVsPTAxSFdUSE40WUtQSkE4Uk44QUJZV1QzNkNXVwVzcGNldUIKZq13GbpmJWNg71IbdHJpc3RyYW1iYWxkd2luOTFAZ21haWwuY29tWAQAAGQd ~/AAAHUQA~/RgRonJ53P0UgODE0NTdiMjk3MTZjY2E5NmNmZDU0ZWMwMTg5OWIzNjhEY2h0dHBzOi8vZm9ybS50eXBlZm9ybS5jb20vdG8vdTVEQ3B0QkcjYW5zd2Vycy1ob3dfZGlkX3lvdV9mZWVsPTEzNjg3YjBhLTMwZmQtNDQxNC1iZDFlLTRkNjQ1ZGIzYTkwMVcFc3BjZXVCCmatdxm6ZiVjYO9SG3RyaXN0cmFtYmFsZHdpbjkxQGdtYWlsLmNvbVgEAABkHQ~~ What do you want to see more of? ~/AAAHUQA~/RgRonJ53P0UgMjllODE5M2ZjYTFkNGQzYWY2YjAzNTA4ZDY1YzJjNDZEXmh0dHBzOi8vZm9ybS50eXBlZm9ybS5jb20vdG8vdTVEQ3B0QkcjYW5zd2Vycy1zZWVfbW9yZV9vZj0wMjQ1MWQ0ZC05Y2NhLTQzNmMtYmFhOS0zYzAzNmM4ODZhMGRXBXNwY2V1QgpmrXcZumYlY2DvUht0cmlzdHJhbWJhbGR3aW45MUBnbWFpbC5jb21YBAAAZB0~ ~/AAAHUQA~/RgRonJ53P0UgNmRlNmM0ZTA2MWNmMDA2MzMyOGFiNjgzOTRiMjg5OGNEXmh0dHBzOi8vZm9ybS50eXBlZm9ybS5jb20vdG8vdTVEQ3B0QkcjYW5zd2Vycy1zZWVfbW9yZV9vZj1iZGYzZDg5ZS0xYmU1LTRjNTctYjhmNy1iNzljM2RiYjkyMmVXBXNwY2V1QgpmrXcZumYlY2DvUht0cmlzdHJhbWJhbGR3aW45MUBnbWFpbC5jb21YBAAAZB0~ ~/AAAHUQA~/RgRonJ53P0UgMzJmMzUyYjE3Mjg3Y2NmMmUyYzkwMmFjOTk3NDU2MzVEXmh0dHBzOi8vZm9ybS50eXBlZm9ybS5jb20vdG8vdTVEQ3B0QkcjYW5zd2Vycy1zZWVfbW9yZV9vZj00ZGYzYzQwZC1lMzhhLTQ0OWYtOGJmMi1kYWEwMDI1YTFkMWVXBXNwY2V1QgpmrXcZumYlY2DvUht0cmlzdHJhbWJhbGR3aW45MUBnbWFpbC5jb21YBAAAZB0~ ~/AAAHUQA~/RgRonJ53P0UgMzVmM2Y1MjgzMDViMmI1YzQzMDJhOTQ5M2ZlN2Y0NzBEXmh0dHBzOi8vZm9ybS50eXBlZm9ybS5jb20vdG8vdTVEQ3B0QkcjYW5zd2Vycy1zZWVfbW9yZV9vZj1hYTAzMzMxNi0zM2I4LTQzOWEtYTMwZi1hOTI1MGU0YjJhYjNXBXNwY2V1QgpmrXcZumYlY2DvUht0cmlzdHJhbWJhbGR3aW45MUBnbWFpbC5jb21YBAAAZB0~ 71 Balmain Street Cremorne Vic 3121 Australia You received this email because you signed up on our website or made a purchase from us. [facebook social link](~/AAAHUQA~/RgRonJ53P0UgN2JjOWNjMmY3ZjYyMDUzNzc5YjNiNWYzY2FmNTA4OWJEI2h0dHBzOi8vd3d3LmZhY2Vib29rLmNvbS9zaXRlcG9pbnQvVwVzcGNldUIKZq13GbpmJWNg71IbdHJpc3RyYW1iYWxkd2luOTFAZ21haWwuY29tWAQAAGQd) [x social link](~/AAAHUQA~/RgRonJ53P0UgZjRlNzlmMWRhMGMxMzZmYWQ3MjRmNWE1Yjc1NGI3ODdEJGh0dHBzOi8vdHdpdHRlci5jb20vc2l0ZXBvaW50ZG90Y29tL1cFc3BjZXVCCmatdxm6ZiVjYO9SG3RyaXN0cmFtYmFsZHdpbjkxQGdtYWlsLmNvbVgEAABkHQ~~) [linkedin social link](~/AAAHUQA~/RgRonJ53P0UgZTExNmUwNDRlM2IxNGI1ZTY4ODFhMWRhODk1ZTFjOWNEJ2h0dHBzOi8vbGlua2VkaW4uY29tL2NvbXBhbnkvc2l0ZXBvaW50L1cFc3BjZXVCCmatdxm6ZiVjYO9SG3RyaXN0cmFtYmFsZHdpbjkxQGdtYWlsLmNvbVgEAABkHQ~~) [Unsubscribe from this list](~/AAAHUQA~/RgRonJ53P4QWAWh0dHBzOi8vYmVycmltYS5lb2NhbXBhaWduMS5jb20vdW5zdWJzY3JpYmU_ZXA9MiZsPWNhYTY1ODU4LTRhYzYtMTFlZS04MDE2LTRkY2U5YmEwOGU2ZCZsYz04NzA3ZWU4Ni01MmYwLTExZWUtYWY1Mi00YjUzODJiYTNiOTQmcD0yMTMzNWFiOC01MzQwLTExZWYtOGI2OS01MWE4YjcwOTYxYWImcHQ9Y2FtcGFpZ24mcHY9NCZzcGE9MTcyMzQ2OTQzNyZ0PTE3MjM0NzIyNDcmcz1iNzI0MjdhZDg2NDhjZDhkYzFlMzFiOTlhNDg4NzA1ZWNkMjMzZmYzN2MyZWUyODdhMTI5NmM0MTE5NjgwODY5VwVzcGNldUIKZq13GbpmJWNg71IbdHJpc3RyYW1iYWxkd2luOTFAZ21haWwuY29tWAQAAGQd)