
Security News
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.
🌈 Unified Package Manager for Node.js (npm, pnpm, yarn), Bun and Deno.
✅ Supports npm, yarn, pnpm, bun and deno out of the box with a unified API.
✅ Provides an API interface to interact with package managers.
✅ Autodetects project's package manager using package.json and known lockfiles.
✅ corepack integration for pnpm and yarn.
nypm commandInstall dependencies:
npx nypm i
Add a dependency:
npx nypm add defu
Remove a dependency:
npx nypm remove defu
Install package:
# ✨ Auto-detect
npx nypm install nypm
Import:
// ESM import
import { addDependency } from "nypm";
// or dynamic import
const { addDependency } = await import("nypm");
addDependency(name, options)Adds dependency to the project.
addDevDependency(name, options)Adds dev dependency to the project.
detectPackageManager(cwd, options)Detect the package manager used in a directory (and up) by checking various sources:
packageManager field from package.jsonensureDependencyInstalled(name, options)Ensures dependency is installed.
installDependencies(options)Installs project dependencies.
removeDependency(name, options)Removes dependency from the project.
dedupeDependencies(options)Dedupe project dependencies.
[!NOTE] For
bunanddenoit will remove the lockfile and reinstall all dependencies.
runScript(name, options)Runs a script defined in the package.json file.
dlx(package, options)Download and execute a package with the package manager.
installDependenciesCommand(<pm>, { short?, frozenLockFile? })Get the command to install dependencies with the package manager.
addDependencyCommand(<pm>, <name>, { dev?, global?, workspace?, yarnBerry?, short? })Get the command to add a dependency with the package manager.
runScriptCommand(<pm>, <name>, { args? })Get the command to run a script with the package manager.
dlxCommand(<pm>, <name>, { args?, short?, packages? })Get the command to download and execute a package with the package manager.
corepack enablepnpm installpnpm devNYPM is inspired from previous attempts and projects for unifying package manager experience.
Made with 💛
Published under MIT License.
FAQs
Unified Package Manager for Node.js
The npm package nypm receives a total of 10,582,825 weekly downloads. As such, nypm popularity was classified as popular.
We found that nypm demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.