jscrambler npm Backdoored: Rotate Your Credentials Now
The jscrambler npm package was backdoored five times on July 11, 2026. Five malicious versions stole cloud keys, AI API tokens, and crypto ...
Hono 4.12.27 Patches Three CVEs: Upgrade Now
Hono 4.12.27 patches three CVEs: XSS via cx() in hono/css, async context leakage in hono/jsx, ...
Ant JavaScript Runtime: 8MB Binary, 5ms Cold Start, Built-in Sandbox
Ant is a new JavaScript runtime that cold-starts in 5ms, fits in 8MB, and ships ...
TypeScript 7.0 GA: 10x Faster, Vue and Svelte Must Wait
TypeScript 7.0 shipped July 8 with a Go-native compiler that's 10x faster. React and Node.js ...
LiteRT.js: Run AI Models in the Browser, No Server
Google's LiteRT.js runs .tflite models in the browser via WebAssembly — 3x faster than TensorFlow.js. ...
Astro 7.0: Rust Compiler, Vite 8, and 61% Faster Builds
Astro 7.0 ships a Rust compiler rewrite and Vite 8 with Rolldown for 15–61% faster builds. Here is what changed, what breaks, and ...
WebMCP in Chrome 149: Make Your Site AI-Agent Ready Now
Chrome 149’s WebMCP origin trial is open and Edge 147 ships it natively. Implement the ...
TypeScript 7.0 Is GA: Go Compiler Delivers 10x Faster Builds
TypeScript 7.0 is GA as of July 8. The Go-native compiler delivers 10x faster builds ...
Node.js v26.5.0: Text Imports, Blob Streaming, and Post-Quantum TLS
Node.js v26.5.0 ships today with experimental text imports, Blob.prototype.textStream() for memory-safe blob streaming, TLS group ...
shadcn/ui Base UI Default: What React Devs Must Know Now
shadcn/ui switched its default primitive from Radix to Base UI this week. Here is what ...