Packagist Attack Hid Malware in package.json — 8 PHP Packages Hit
Eight Packagist PHP packages including devdojo/wave were compromised via a postinstall script hidden in package.json. Check if you’re affected and rotate credentials now.
WordPress 7.0: PHP-Only Blocks Need No JavaScript
WordPress 7.0 Armstrong lets you build native Gutenberg blocks in pure PHP. No webpack, no ...
WebMCP: Chrome Just Turned Your Website Into an AI Agent Tool
Google announced WebMCP at I/O 2026: expose structured tools to AI agents instead of DOM ...
Modern Web Guidance: Fix Your AI Agent’s Stale Web Code Now
Google's Modern Web Guidance bundles 128 Chrome-verified web skills into your AI coding agent with ...
Wasp Ditched Its Own Language After 5 Years — Why It Matters
Wasp spent 5 years and $5M building a custom DSL for full-stack web development. Here's ...
HTML-in-Canvas API: Draw Live DOM Inside WebGL (Chrome 2026)
Chrome's HTML-in-Canvas API lets you render live DOM elements directly inside a WebGL or 2D canvas — no screenshots, full accessibility. Here's how ...
WebMCP: Chrome Turns Websites Into AI Agent Tools (2026)
WebMCP lets websites declare structured AI agent tools directly in the browser. Learn how Chrome's ...
WebMCP: Make Your Website Callable by AI Agents (Chrome 149)
WebMCP is Chrome's new W3C standard that lets browser AI agents call your website's tools ...
WordPress 7.0: AI Web Client API Ships, Real-Time Collab Dropped
WordPress 7.0 releases May 20 with a provider-agnostic AI Web Client API, PHP-only block registration, ...
WASI Guide 2026: WebAssembly System Interface Tutorial
WASI (WebAssembly System Interface) is the portable system call interface that makes WebAssembly work beyond ...