144 Mastra npm Packages Backdoored: What to Check Right Now
144 @mastra npm packages were compromised today via a hijacked contributor account and typosquatted easy-day-js dependency. Run npm ls easy-day-js to check if ...
Go’s Green Tea GC: Real-World Results Are Mixed
Four months after Go 1.26 shipped Green Tea as the default GC, community benchmarks show ...
ForceMemo: GlassWorm Is Now Inside Python Repos
GlassWorm's ForceMemo campaign backdoored 400+ Python repositories using stolen GitHub tokens and force-push techniques that ...
Django 6.1 Kills the N+1 Query Problem: How FETCH_PEERS Works
Django 6.1 introduces FETCH_PEERS, a new QuerySet fetch mode that auto-batches lazy field access to ...
That LinkedIn Job Offer Hid a Backdoor in npm install
A developer almost got owned by a LinkedIn recruiter's GitHub repo. The backdoor was in ...
Rust Hits TIOBE All-Time High: Top 10 Now Within Reach
Rust jumped to #12 on the TIOBE Index in June 2026 — its highest position ever — after an April plateau call. Here's ...
WebAssembly 3.0 Is Official: Nine Features That Change What Wasm Can Do
WebAssembly 3.0 standardizes nine features including WasmGC, Memory64, and native exception handling. Here is what ...
Deno 2.8: Six New Subcommands That Replace Your npm Toolchain
Deno 2.8 ships deno transpile, deno ci, deno why, deno audit fix, deno pack, and ...
Proto6: Six protobuf.js Vulnerabilities Expose Node.js to RCE
Cyera Research disclosed 6 CVEs in protobuf.js (Proto6) on June 10, 2026. Two achieve RCE ...
Python Free-Threading Is Official: What PEP 779 Means for Your Code
Python 3.14.6 landed on June 10. Buried in the changelog is the announcement developers have ...