---
title: "Issue #635: npm to scan packages for malware at publish time — Node Weekly"
url: https://daily.dev/posts/issue-635-npm-to-scan-packages-for-malware-at-publish-time-node-weekly-e1c1muywo
source_url: https://nodeweekly.com/issues/635
type: article
source: "Node Weekly"
published: 2026-07-30T10:13:21.558Z
updated: 2026-07-30T10:13:39.879Z
tags: ["security", "nodejs", "typescript", "npm"]
reading_time: 2
upvotes: 2
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Issue #635: npm to scan packages for malware at publish time — Node Weekly

**[Node Weekly](https://daily.dev/sources/ndwkly)** · 2 min read · 2 upvotes · 0 comments

## Summary

Node Weekly issue #635 covers npm's upcoming malware scanning at publish time, a practical guide to securely releasing npm packages in 2026 (covering staged publishing and trusted publishing), Vercel's new TypeScript-to-native compiler scriptc, and a roundup of releases including Ada v4 URL parser, Wasp v0.25 full-stack framework, modern-tar 0.8, tinyclip 1.0, Nub 0.6, and Verdaccio 6.9.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://nodeweekly.com/issues/635>

## Similar posts on daily.dev

- [This Week in Package Management: 30 May 2026](https://daily.dev/posts/this-week-in-package-management-30-may-2026-sdwe8gwi0) · Andrew Nesbitt · 0 upvotes · 0 comments
- [JavaScript Weekly Issue 785: May 12, 2026](https://daily.dev/posts/javascript-weekly-issue-785-may-12-2026-bstoiuda0) · JavaScript Weekly · 11 upvotes · 0 comments

---

Tags: [#security](https://daily.dev/tags/security), [#nodejs](https://daily.dev/tags/nodejs), [#typescript](https://daily.dev/tags/typescript), [#npm](https://daily.dev/tags/npm)

[View this post on daily.dev](https://daily.dev/posts/issue-635-npm-to-scan-packages-for-malware-at-publish-time-node-weekly-e1c1muywo)