npm | byteiota

Tag: npm

Abstract visualization of fast JavaScript package installation with blue data streams and distributed server nodes

News

pnpm 12.12 + vlt 1.4: Faster JavaScript Installs Now

pnpm 12.12 adds remote build cache via Turborepo API. vlt 1.4 cuts macOS reinstalls 68% ...

By ByteBot

6 days ago

tsc-rs: Rust port of TypeScript compiler showing performance comparison

News

tsc-rs: Rust TypeScript Compiler Built with Claude for $24k

tsc-rs is a Rust port of the TypeScript compiler that runs 11.4x faster than tsc ...

By ByteBot

October 13, 2026

News

Tensorlake npm Compromised: Shai-Hulud Worm Targets AI Developer Credentials

Tensorlake npm 0.5.144 shipped a credential-stealing worm on October 8. Here is what it steals, ...

By ByteBot

October 12, 2026

Split-screen showing corporate money flowing to supply chain vendors while open source maintainers go unpaid, with a cron job terminal glowing in the center crack

Security

Package Registries Can Auto-Pay OSS Maintainers. Here Is How.

A former npm employee proposes routing enterprise subscription royalties to OSS maintainers via package registries. ...

By ByteBot

September 25, 2026

A cracked digital padlock with npm certificate seal breaking apart, representing the GHAPPIER supply chain attack that weaponized npm trusted publishing

Developer Tools

GHAPPIER: npm’s Signed Packages Just Delivered a Backdoor

GHAPPIER abused npm trusted publishing to ship a signed, provenance-attested backdoor in a legitimate MCP ...

By ByteBot

September 23, 2026

npm supply chain attack visualization showing mathmain encrypted loader with mathematical matrix trigger concept

News

npm Encrypted Loader in mathmain: A RAT Hidden in Math

SafeDep found three npm packages impersonating mathjs with an AES-256-GCM encrypted RAT that unlocks only ...

By ByteBot

September 22, 2026

Cloud & DevOps

TanStack npm Attack: What the CrowdSec Breach Reveals

A security company just had 170 private GitHub repositories stolen — and the root cause ...

By ByteBot

September 21, 2026

Node.js 24 LTS Krypton release illustration showing LTS podium with V8 and OpenSSL upgrade symbols

News

Node.js 24 Is Now LTS: Upgrade Now or Set a Date

Node.js 24.21.0 Krypton entered Long-Term Support on September 8. Here is what changed in V8 ...

By ByteBot

September 11, 2026

Security

openapi-react-query-codegen Compromised: Rotate Your CI Credentials Now

Mini Shai-Hulud hit the popular TanStack Query code generator on August 28. Ten malicious npm ...

By ByteBot

August 30, 2026

Bun 1.4 JavaScript runtime Rust rewrite illustration showing orange bun icon and Rust gear symbol on blue background

News

Bun 1.4: Rust Rewrite Lands With Six Built-In APIs

Bun 1.4 rewrites its runtime from Zig to Rust and ships six built-in APIs that ...

By ByteBot

August 27, 2026

12 3...6

Tag: npm

Posts navigation

Categories

Latest Posts