ECMAScript 2026: 7 Features Live in Your Runtime Now
ECMAScript 2026 was approved June 30. Seven features work natively in Node.js 24 and Chrome 137+ today. Here's the tier-by-tier breakdown with before/after ...
ViteVenom: 7 Fake npm Packages Use Blockchain to Deliver RATs
Seven malicious npm packages impersonating @vitejs/* deliver a RAT via blockchain C2 — infrastructure that ...
Next.js Patches 9 Vulnerabilities on July 20 — Act Now
Next.js releases a patch for 9 vulnerabilities — 4 rated high severity — on July ...
npm v12: Install Scripts Blocked by Default — Migration Guide
npm v12 shipped July 8 and disabled install scripts by default. Here’s what breaks, why ...
ECMAScript 2026: Seven Fixes, Three Features That Matter More
ECMAScript 2026 was ratified on June 30 with seven API-level additions that fix long-standing JavaScript ...
Node.js Drops Odd Releases: What the New LTS Model Means
Node.js is moving to one major release per year starting with Node 27. Every version becomes LTS. Here is what changes for your ...
jscrambler npm Backdoored: Rotate Your Credentials Now
The jscrambler npm package was backdoored five times on July 11, 2026. Five malicious versions ...
Hono 4.12.27 Patches Three CVEs: Upgrade Now
Hono 4.12.27 patches three CVEs: XSS via cx() in hono/css, async context leakage in hono/jsx, ...
Ant JavaScript Runtime: 8MB Binary, 5ms Cold Start, Built-in Sandbox
Ant is a new JavaScript runtime that cold-starts in 5ms, fits in 8MB, and ships ...
TypeScript 7.0 GA: 10x Faster, Vue and Svelte Must Wait
TypeScript 7.0 shipped July 8 with a Go-native compiler that's 10x faster. React and Node.js ...