npm | byteiota

Tag: npm

Node.js 24 LTS Krypton release illustration showing LTS podium with V8 and OpenSSL upgrade symbols

News

Node.js 24 Is Now LTS: Upgrade Now or Set a Date

Node.js 24.21.0 Krypton entered Long-Term Support on September 8. Here is what changed in V8 ...

53 minutes ago

npm package box with supply chain worm and credential cards, cybersecurity illustration

Security

openapi-react-query-codegen Compromised: Rotate Your CI Credentials Now

Mini Shai-Hulud hit the popular TanStack Query code generator on August 28. Ten malicious npm ...

August 30, 2026

Bun 1.4 JavaScript runtime Rust rewrite illustration showing orange bun icon and Rust gear symbol on blue background

JavaScript

Bun 1.4: Rust Rewrite Lands With Six Built-In APIs

Bun 1.4 rewrites its runtime from Zig to Rust and ships six built-in APIs that ...

August 27, 2026

TypeScript 7.0 Go-native compiler build speed visualization with TS and Go logos

JavaScript

TypeScript 7.0: The Go Compiler Delivers 10x Faster Builds

TypeScript 7.0 swaps the JavaScript compiler for a native Go binary. Builds are 8-12x faster. ...

August 18, 2026

News

ChainDrop npm Worm: Fix Your Lockfile Before You Rotate Credentials

ChainDrop hit 444 npm packages and 2B monthly downloads. Here is the correct fix order ...

August 15, 2026

News

ChainDrop Worm Hits 400 npm Packages: Rotate Credentials Now

ChainDrop npm worm hit keyv and 443 more packages on August 4. It steals AWS, ...

August 9, 2026

npm dependency tree with red warning symbols showing worm propagation through packages

News

npm keyv Supply Chain Attack: 127M Downloads Hit via ESLint

The keyv npm worm hit 444 packages and 2B+ monthly installs on Aug 4. If ...

August 6, 2026

JavaScript

vlt 1.0: Switch From npm Before Your Next Incident

The team that built npm just shipped its replacement. vlt 1.0 — pronounced “volt” — ...

August 5, 2026

News

Keyv npm Supply Chain Attack: Shai-Hulud Hits 2B Installs

Keyv and 868 npm packages compromised by Shai-Hulud worm malware today — over 2B monthly ...

August 4, 2026

OpenAI Codex Security CLI terminal showing vulnerability scan results with blue and white color scheme

News

OpenAI Codex Security CLI: Open Source With One Catch

OpenAI Codex Security CLI is now open source on npm. Here is what the AI-powered ...

July 31, 2026

12 3...6