Fake PostCSS npm Packages Drop a Windows RAT — Act Now
Three malicious npm packages impersonating PostCSS tools installed a Windows RAT on developer machines. Check your dependencies and rotate credentials now.
npm v12 Ships in July: Prepare Your CI/CD Now
npm v12 lands in July with install scripts disabled, git deps blocked, and remote URLs ...
Deno 2.4: deno bundle Is Back and Built on esbuild
Deno 2.4 brings back deno bundle via esbuild, stabilizes OpenTelemetry, and ships deno update. Here's ...
Node.js 24 Native TypeScript: Run .ts Files Without a Build Step
Node.js 24 ships native TypeScript support by default. Learn how type stripping works, what breaks, ...
Node.js 24 Native TypeScript: Run .ts Files Without a Build Step
Node.js 24 ships native TypeScript support by default. Learn how type stripping works, what breaks, ...
Vercel eve: The Open-Source Agent Framework That Treats Agents as Directories
Vercel shipped eve on June 17 — an open-source TypeScript agent framework where your agent is a directory of files. Durable execution, sandboxed ...
Deno Desktop: Build Cross-Platform Apps Without Electron
Deno v2.9 ships deno desktop in canary: TypeScript-first, OS webview, cross-compile from one machine. Is ...
NestJS v12 Preview: ESM, Vitest, and the End of class-validator
NestJS v12 preview is on npm now. ESM migration, Vitest replacing Jest, oxlint for ESLint, ...
pnpm 11.7: frozenStore, Batch Publish, and Scope Auth Tokens
pnpm 11.7 ships frozenStore for read-only Nix and OCI installs, atomic batch publishing for monorepos, ...
React Router v8: ESM-Only, Middleware On, Node 22 Now
React Router v8 landed on June 17. It requires Node 22, ships ESM only, and ...