TanStack AI Beta: Code Mode, Middleware, and MCP Are Here
TanStack AI hits Beta with Code Mode sandbox execution, middleware, and host-side MCP. Here's what changed and who should switch now.
Node.js Patches 12 CVEs — Two Auth Bypasses to Fix Now
Node.js patched 12 vulnerabilities on June 18, including two HIGH-severity bugs: a WebCrypto process crash ...
Bun’s new Thread() PR: JS Gets True Multithreading
Bun opened a 60K-line PR adding shared-memory threads to JavaScriptCore. It may never merge. Here ...
TypeScript 7.0 RC Ships: VS Code Build Drops From 77s to 7s
TypeScript 7.0 Release Candidate is here. The Go-based compiler cuts VS Code type-checks from 77.8 ...
Node.js 26.3.1, 24.17.0, 22.23.0: Four CVEs to Patch Now
Node.js shipped security patches for all active release lines today. Two HIGH-severity CVEs — TLS ...
144 Mastra npm Packages Backdoored: What to Check Right Now
144 @mastra npm packages were compromised today via a hijacked contributor account and typosquatted easy-day-js dependency. Run npm ls easy-day-js to check if ...
That LinkedIn Job Offer Hid a Backdoor in npm install
A developer almost got owned by a LinkedIn recruiter's GitHub repo. The backdoor was in ...
Deno 2.8: Six New Subcommands That Replace Your npm Toolchain
Deno 2.8 ships deno transpile, deno ci, deno why, deno audit fix, deno pack, and ...
Proto6: Six protobuf.js Vulnerabilities Expose Node.js to RCE
Cyera Research disclosed 6 CVEs in protobuf.js (Proto6) on June 10, 2026. Two achieve RCE ...
Svelte 5.56 and TypeScript 6: The peerDependency Change That Breaks Your Setup
The June 2026 Svelte update looks like a routine version bump. It is not. TypeScript ...