Node JS

[ follow ]
#javascript
Node JS
fromFrontendmasters
1 day ago

What To Know in JavaScript (2026 Edition)

JavaScript's ECMAScript 2025 introduces new iterator methods and improved set functionalities, enhancing performance and usability for developers.
fromInfoQ
2 weeks ago
Node JS

State of JavaScript 2025: Survey Reveals a Maturing Ecosystem with TypeScript Cementing Dominance

Node JS
fromFrontendmasters
1 day ago

What To Know in JavaScript (2026 Edition)

JavaScript's ECMAScript 2025 introduces new iterator methods and improved set functionalities, enhancing performance and usability for developers.
Node JS
fromAlex MacArthur
4 days ago

Your options for preloading images with JavaScript

Preloading images in JavaScript can be achieved through various methods, with the best choice depending on specific circumstances.
Node JS
fromInfoQ
2 weeks ago

State of JavaScript 2025: Survey Reveals a Maturing Ecosystem with TypeScript Cementing Dominance

TypeScript continues to dominate the JavaScript ecosystem, with 40% of developers using it exclusively, while Vite surpasses Webpack in satisfaction.
#npm
Node JS
fromInfoQ
1 day ago

Axios npm Package Compromised in Supply Chain Attack

A significant supply chain attack on Axios introduced a Remote Access Trojan via hijacked maintainer accounts, affecting numerous developer environments.
Node JS
fromBleepingComputer
3 days ago

Hackers compromise Axios npm package to drop cross-platform malware

Hackers compromised the Axios npm account to distribute remote access trojans across multiple operating systems.
Node JS
fromTheregister
3 days ago

Top npm package backdoored to drop dirty RAT on dev machines

A widely used npm library, axios, was compromised to deliver malware through a maintainer's hijacked account.
Node JS
fromInfoQ
1 day ago

Axios npm Package Compromised in Supply Chain Attack

A significant supply chain attack on Axios introduced a Remote Access Trojan via hijacked maintainer accounts, affecting numerous developer environments.
Node JS
fromBleepingComputer
3 days ago

Hackers compromise Axios npm package to drop cross-platform malware

Hackers compromised the Axios npm account to distribute remote access trojans across multiple operating systems.
Node JS
fromTheregister
3 days ago

Top npm package backdoored to drop dirty RAT on dev machines

A widely used npm library, axios, was compromised to deliver malware through a maintainer's hijacked account.
Node JS
fromTreehouse Blog
2 days ago

How to Build Your First Full Stack App as a Beginner

Building a simple full stack project enhances understanding of front end, back end, and database interactions beyond theoretical knowledge.
#axios
Node JS
fromSecurityWeek
2 days ago

Axios NPM Package Breached in North Korean Supply Chain Attack

Malicious Axios NPM library versions were distributed in a supply chain attack by North Korean hackers, affecting millions of users.
Node JS
fromAxios
3 days ago

North Korean hackers implicated in major supply chain attack

A compromised maintainer account for the Axios npm package led to the publication of malicious software versions targeting various operating systems.
Node JS
fromThe Hacker News
3 days ago

Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account

Axios experienced a supply chain attack due to malicious dependencies in two npm package versions.
Node JS
fromSecurityWeek
2 days ago

Axios NPM Package Breached in North Korean Supply Chain Attack

Malicious Axios NPM library versions were distributed in a supply chain attack by North Korean hackers, affecting millions of users.
Node JS
fromAxios
3 days ago

North Korean hackers implicated in major supply chain attack

A compromised maintainer account for the Axios npm package led to the publication of malicious software versions targeting various operating systems.
Node JS
fromThe Hacker News
3 days ago

Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account

Axios experienced a supply chain attack due to malicious dependencies in two npm package versions.
Node JS
fromInfoQ
4 days ago

Are We Ready for the Next Cyber Security Crisis Like Log4shell?

Organizations are not prepared for the next cybersecurity crisis, similar to Log4Shell.
#nodejs
Node JS
fromThe Cyber Express
1 week ago

Node.js Fixes CVE-2026-21637 And Critical Flaws Now

Node.js has released security updates addressing multiple vulnerabilities, including critical issues in TLS error handling and HTTP request processing.
Node JS
fromDEV Community
2 weeks ago

I Scanned 6 Popular Node.js Repos for Undocumented Environment Variables. Here's What I Found.

Many popular Node.js projects lack comprehensive documentation for process.env variables, leading to potential configuration issues.
Node JS
fromThe Cyber Express
1 week ago

Node.js Fixes CVE-2026-21637 And Critical Flaws Now

Node.js has released security updates addressing multiple vulnerabilities, including critical issues in TLS error handling and HTTP request processing.
Node JS
fromDEV Community
2 weeks ago

I Scanned 6 Popular Node.js Repos for Undocumented Environment Variables. Here's What I Found.

Many popular Node.js projects lack comprehensive documentation for process.env variables, leading to potential configuration issues.
Node JS
fromhowtocenterdiv.com
1 week ago

Database Performance Bottlenecks: N+1 Queries, Missing Indexes, and Connection Pools

Database issues, like missing indexes and N+1 queries, are often overlooked in software engineering, leading to persistent performance problems.
fromZDNET
1 week ago

How this strange little distro can boost your Linux skills

Peropesis is a command-line-only OS that can only be run as a live instance. Users log in with the root user and should change the password immediately.
Node JS
Node JS
fromInfoQ
1 week ago

Inside Netflix's Graph Abstraction: Handling 650TB of Graph Data in Milliseconds Globally

Netflix engineers developed Graph Abstraction to manage large-scale graph data in real time, enabling fast queries and supporting various internal services.
Node JS
fromInfoQ
1 week ago

QCon London 2026: Running AI at the Edge - Running Real Workloads Directly in the Browser

Running AI in the browser enhances privacy, reduces latency, and lowers costs by eliminating reliance on third-party cloud services.
Node JS
fromThe Hacker News
1 week ago

North Korean Hackers Abuse VS Code Auto-Run Tasks to Deploy StoatWaffle Malware

North Korean threat actors use StoatWaffle malware via malicious VS Code projects to steal data and execute commands on infected systems.
Node JS
fromhowtocenterdiv.com
2 weeks ago

Bun vs Node.js Performance: Why Your Event Loop Is the Real Bottleneck

Bun outperforms Node.js in specific benchmarks, but real-world performance issues often stem from database and CPU bottlenecks, not runtime choice.
Node JS
fromDEV Community
2 weeks ago

I Scanned 10 Popular GitHub Actions Workflows for Undocumented Environment Variables. Here's What I Found.

Many popular JavaScript projects have undocumented environment variables in their GitHub Actions workflows, leading to potential issues for developers forking these projects.
Node JS
fromInfoWorld
2 weeks ago

Edge.js launched to run Node.js for AI

Edge.js is a WebAssembly-based JavaScript runtime that safely executes Node.js applications with faster startup times by sandboxing workloads through WASIX.
Node JS
fromDEV Community
2 weeks ago

Why I Stopped Maintaining .env.example by Hand

A new tool automatically discovers environment variables used in Node.js code to prevent stale .env.example files from causing deployment failures.
Node JS
fromgithub.com
2 weeks ago

zahhar/ghcp-dashboard: Dashboard with Github Copilot Metrics

A lightweight Node.js dashboard aggregates GitHub Copilot usage metrics via REST API to display team adoption patterns, user engagement, and model/IDE preferences through a browser-based leaderboard interface.
Node JS
fromAllthingssmitty
2 weeks ago

Native JSON modules are finally real - Matt Smith

Import attributes enable native JSON module support in JavaScript, eliminating the need for bundler transforms by allowing explicit type declaration with the `with { type: "json" }` syntax.
Node JS
fromInfoWorld
3 weeks ago

TypeScript 6.0 reaches release candidate stage

TypeScript 6.0 reached release candidate stage with improved type checking for function expressions in generic calls, scheduled for general availability on March 17.
Node JS
fromTechzine Global
3 weeks ago

New npm browser npmx addresses shortcomings of npmjs

Npmx, an open-source alternative interface to npm's official website, addresses widespread developer dissatisfaction with the current package registry's user experience and presentation of package information.
Node JS
fromInfoWorld
4 weeks ago

Why local-first matters for JavaScript

JavaScript innovation accelerates through local-first SQL datastores, universal isomorphic JavaScript via WinterTC, reactive signals adoption, NPM alternatives, Java-JavaScript bridges, and Deno's resurgence.
fromTheregister
4 weeks ago

npmx alternative to npmjs released to fix pain of rpm

npmx is about speed and simplicity. It gives you useful data like install size, module format and outdated dependencies ... we're also building social features into npmx because open source is better when it's easier to connect with the people behind the packages.
Node JS
Node JS
fromDevOps.com
1 month ago

Malicious NPM Package Gets Downloaded 50K Times Before Discovery - DevOps.com

A malicious npm package downloaded 50,000 times used naming deception and preinstall script hooks to evade detection and compromise Windows, Linux, and macOS systems.
Node JS
fromMedium
1 month ago

Why your Vitest test suite is slow (and how to fix it)

A team successfully migrated their large React project from Jest to Vitest and optimized performance to exceed Jest speeds through configuration and strategic improvements.
Node JS
fromTheregister
1 month ago

Feel the burn: Open source developers decide to take a break

Open source culture incentivizes sustained overwork, making developer burnout structural, so intentional rest and balance are necessary for long-term OSS sustainability.
Node JS
fromkrasimirtsonev.com
1 month ago

Nice try dear AI. Now let's talk about production.

AI-assisted code generation remains a tool that cannot fully replace senior software engineers; programming fundamentals and human oversight remain essential.
Node JS
fromInfoWorld
1 month ago

WinterTC: Write once, run anywhere (for real this time)

Unified JavaScript runtime standard WinterTC creates a consistent guaranteed API surface across browsers, servers, and edge runtimes to reduce fragmentation.
#opentelemetry
fromVue.js Jobs
1 month ago

Software Development Engineer III - Core CRM at HighLevel - VueJobs

HighLevel is an AI powered, all-in-one white-label sales & marketing platform that empowers agencies, entrepreneurs, and businesses to elevate their digital presence and drive growth. We are proud to support a global and growing community of over 2 million businesses, comprised of agencies, consultants, and businesses of all sizes and industries. HighLevel empowers users with all the tools needed to capture, nurture, and close new leads into repeat customers.
Node JS
fromLogRocket Blog
1 month ago

How to solve package validation pain with Publint - LogRocket Blog

Package validation is the process of verifying that your library is correctly structured, configured, and ready to be consumed by others before you publish it. It's not about checking whether your logic works. That's what tests are for. It's about making sure your package metadata, entry points, module formats, and published files all line up so that consumers can install and use it without unexpected runtime errors.
Node JS
Node JS
fromCodeberg.org
1 month ago

promethee

Promethee provides UEFI bindings that let JavaScript code in script.js run as a freestanding bootloader and call UEFI services.
#typescript
fromGitHub
1 month ago
Node JS

GitHub - webllm/browser-use: browser-use for TypeScript: AI-Powered Browser Automation from Python's Acclaimed Library

fromGitHub
1 month ago
Node JS

GitHub - webllm/browser-use: browser-use for TypeScript: AI-Powered Browser Automation from Python's Acclaimed Library

Node JS
fromMedium
3 months ago

Gemini CLI Quick Start

Gemini CLI provides an interactive terminal-based AI coding assistant powered by Google's Gemini models, with codebase awareness, tool execution, MCP support, session management, and sandboxing.
fromThe NodeSource Blog - Node.js Tutorials, Guides, and Updates
2 months ago

Resolved: GPG Signature Warnings on Debian 13 and Modern Ubuntu

If you've recently upgraded to Debian 13 ("Trixie") or a newer version of Ubuntu and suddenly started seeing security warnings when running apt update (or apt update --audit), don't worry. You didn't do anything wrong. This is a side effect of a broader security change across modern Linux distributions. SHA-1 signatures are being deprecated, and repositories that still rely on them may now trigger warnings or audits. What changed? We've rotated our GPG keys to SHA-512 and re-signed our repositories to align with modern security standards, using Sequoia-PGP. In short: Stronger signatures Better compatibility with modern OS policies No more GPG warnings for supported versions
Node JS
fromInfoWorld
2 months ago

Deno boosts dependency management with JSR

JSR offers a modern, TypeScript-first and cross-platform-compatible registry, integrated into Deno, Deno's developers said. For Node.js and NPM compatibility, Deno 1.42 offers numerous improvements. The async_hooks module now supports the EventEmitterAsyncResource and AsyncLocalStorage.enterWith APIs. The crypto module adds getRandomValues(), subtle, getCipherInfo(), publicKey(), and createPublicKey() APIs, along with support for more curves in multiple APIs. The worker_threads module received a major overhaul.
Node JS
Node JS
fromInfoWorld
2 months ago

Deno shrinks deno compile binaries

Deno 1.41 reduces deno compile binary sizes up to 50% and adds official Linux ARM64 builds plus compatibility, API, and language-server improvements.
Node JS
fromInfoWorld
2 months ago

Bun 1.1 JavaScript toolkit backs Windows 10

Bun 1.1 adds Windows 10 support, improves Node.js compatibility, boosts performance, stabilizes WebSocket, and integrates SQLite and developer tooling.
Node JS
fromInfoQ
2 months ago

Prisma 7: Rust-Free Architecture and Performance Gains

Prisma ORM 7.0 replaces its Rust query engine with a TypeScript runtime, yielding smaller bundles, faster queries, lower CPU/memory usage, and easier edge deployments.
Node JS
fromGitHub
2 months ago

GitHub - cluster-127/atrion: Cognitive Resilience Runtime

Model traffic as a physical system and use resistance-based feedback, Z-score auto-tuning, deterministic backpressure, and priority load shedding to prevent cascading failures.
fromVerou
2 months ago

Web dependencies are broken. Can we fix them? * Lea Verou

Dear JS ecosystem, I love you, but you have a dependency management problem when it comes to the Web, and the time has come for an intervention. No, this is not another rant about npm's security issues. Abstraction is the cornerstone of modern software engineering. Reusing logic and building higher-level solutions from lower-level building blocks is what makes all the technological wonders around us possible. Imagine if every time anyone wrote a calculator they also had to reinvent floating-point arithmetic and string encoding!
Node JS
[ Load more ]