Node JS

[ follow ]
#nodejs
#javascript
Node JS
fromSubstack
4 days ago

Friday Links #37 - Dev Tools, AI & JS Updates

JavaScript updates focus on significant performance improvements, new tools, and AI-driven workflows that impact real-world projects.
Node JS
fromFrontendmasters
1 month ago

What To Know in JavaScript (2026 Edition)

JavaScript's ECMAScript 2025 introduces new iterator methods and improved set functionalities, enhancing performance and usability for developers.
Node JS
fromAlex MacArthur
1 month ago

Your options for preloading images with JavaScript

Preloading images in JavaScript can be achieved through various methods, with the best choice depending on specific circumstances.
Node JS
fromInfoQ
1 month ago

State of JavaScript 2025: Survey Reveals a Maturing Ecosystem with TypeScript Cementing Dominance

TypeScript continues to dominate the JavaScript ecosystem, with 40% of developers using it exclusively, while Vite surpasses Webpack in satisfaction.
Node JS
fromSubstack
4 days ago

Friday Links #37 - Dev Tools, AI & JS Updates

JavaScript updates focus on significant performance improvements, new tools, and AI-driven workflows that impact real-world projects.
Node JS
fromAllthingssmitty
2 weeks ago

Why I don't chain everything in JavaScript anymore - Matt Smith

Chaining methods in JavaScript can complicate readability and debugging, making step-by-step coding often clearer and easier to manage.
Node JS
fromCSS-Tricks
2 weeks ago

A Well-Designed JavaScript Module System is Your First Architecture Decision | CSS-Tricks

JavaScript modules enable private scopes and controlled global access, essential for managing large programs and avoiding conflicts.
Node JS
fromFrontendmasters
1 month ago

What To Know in JavaScript (2026 Edition)

JavaScript's ECMAScript 2025 introduces new iterator methods and improved set functionalities, enhancing performance and usability for developers.
Node JS
fromAlex MacArthur
1 month ago

Your options for preloading images with JavaScript

Preloading images in JavaScript can be achieved through various methods, with the best choice depending on specific circumstances.
Node JS
fromInfoQ
1 month ago

State of JavaScript 2025: Survey Reveals a Maturing Ecosystem with TypeScript Cementing Dominance

TypeScript continues to dominate the JavaScript ecosystem, with 40% of developers using it exclusively, while Vite surpasses Webpack in satisfaction.
Node JS
fromInfoQ
6 days ago

NestJS v12 Roadmap: Full ESM Migration, Standard Schema Validation and Modernised Toolchain

NestJS v12.0.0 will fully migrate to ESM, introduce Standard Schema support, and modernize the toolchain with Vitest and oxlint.
Node JS
fromEngadget
6 days ago

It runs Doom: AI chatbot edition - Engadget

AI chatbots can now run a playable version of Doom using Model Context Protocol.
Node JS
fromInfoQ
1 week ago

npmx Reaches Alpha: Community Driven Alternative Browser for the npm Registry

npmx is an open-source package browser for npm that offers a faster, feature-rich experience compared to npmjs.com.
Node JS
fromInfoWorld
1 week ago

Is your Node.js project really secure?

Dependency security workflows in JavaScript and Node.js lack actionability, leading to late awareness of risks and ineffective responses.
Node JS
fromInfoQ
2 weeks ago

pnpm 11 Release Candidate: ESM Distribution, Supply Chain Defaults and a New Store Format

pnpm 11 RC introduces significant changes in performance, security, and configuration, including a new SQLite-backed store and isolated global installs.
#bun
Node JS
fromTheregister
2 weeks ago

Bun 1.1.13 out with memory fixes as dev complain of leaks

Bun JavaScript runtime 1.1.13 improves testing support and memory management, addressing critical issues like memory leaks in production environments.
Node JS
fromhowtocenterdiv.com
1 month ago

Bun vs Node.js Performance: Why Your Event Loop Is the Real Bottleneck

Bun outperforms Node.js in specific benchmarks, but real-world performance issues often stem from database and CPU bottlenecks, not runtime choice.
Node JS
fromTheregister
2 weeks ago

Bun 1.1.13 out with memory fixes as dev complain of leaks

Bun JavaScript runtime 1.1.13 improves testing support and memory management, addressing critical issues like memory leaks in production environments.
Node JS
fromhowtocenterdiv.com
1 month ago

Bun vs Node.js Performance: Why Your Event Loop Is the Real Bottleneck

Bun outperforms Node.js in specific benchmarks, but real-world performance issues often stem from database and CPU bottlenecks, not runtime choice.
Node JS
fromgithub.com
2 weeks ago

webllm/webblackbox: A Web Blackbox

WebBlackbox records web app interactions and errors, allowing for detailed session replay and debugging.
Node JS
fromTheregister
2 weeks ago

Linux 7.1 will have an optional new NTFS driver

Linux kernel 7.1 introduces a new read-write NTFS driver, emphasizing clean and maintainable code over significant performance improvements.
Node JS
fromDEV Community
2 weeks ago

I got tired of wiring the same caching stack every project, so I built LayerCache

LayerCache simplifies caching by stacking multiple layers and handling cache misses efficiently.
Node JS
fromInfoQ
2 weeks ago

Pulumi Adds Full Bun Runtime Support

Bun is now a fully supported runtime for Pulumi, allowing developers to execute infrastructure programs without Node.js installation.
Node JS
fromRaymondcamden
2 weeks ago

Summarizing Docs with Built-in AI

On-device summarization of various document types, including Office formats, is achievable using libraries like officeParser and Chrome's Summary API.
Node JS
fromInfoQ
2 weeks ago

Using AWS Lambda Extensions to Run Post-Response Telemetry Flush

Lambda extensions enable post-response work, improving API response times by managing telemetry flushing without impacting request handling.
#axios
Node JS
fromNist
3 weeks ago

NVD

Axios library versions prior to 1.15.0 are vulnerable to Prototype Pollution, leading to Remote Code Execution and Full Cloud Compromise.
Node JS
fromSecurityWeek
1 month ago

Axios NPM Package Breached in North Korean Supply Chain Attack

Malicious Axios NPM library versions were distributed in a supply chain attack by North Korean hackers, affecting millions of users.
Node JS
fromAxios
1 month ago

North Korean hackers implicated in major supply chain attack

A compromised maintainer account for the Axios npm package led to the publication of malicious software versions targeting various operating systems.
Node JS
fromThe Hacker News
1 month ago

Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account

Axios experienced a supply chain attack due to malicious dependencies in two npm package versions.
Node JS
fromNist
3 weeks ago

NVD

Axios library versions prior to 1.15.0 are vulnerable to Prototype Pollution, leading to Remote Code Execution and Full Cloud Compromise.
Node JS
fromSecurityWeek
1 month ago

Axios NPM Package Breached in North Korean Supply Chain Attack

Malicious Axios NPM library versions were distributed in a supply chain attack by North Korean hackers, affecting millions of users.
Node JS
fromAxios
1 month ago

North Korean hackers implicated in major supply chain attack

A compromised maintainer account for the Axios npm package led to the publication of malicious software versions targeting various operating systems.
Node JS
fromThe Hacker News
1 month ago

Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account

Axios experienced a supply chain attack due to malicious dependencies in two npm package versions.
Node JS
fromRaymondcamden
3 weeks ago

Testing OCR with Chrome Built-in AI

Chrome's built-in AI can perform OCR on images, enabling text extraction and bounding box identification.
Node JS
fromNist
4 weeks ago

NVD

Tinyproxy versions up to 1.11.3 are vulnerable to HTTP request parsing desynchronization due to case-sensitive Transfer-Encoding header comparison.
Node JS
fromYcombinator
4 weeks ago

Show HN: I rewrote my 2012 self-signed cert generator in Go - cert-depot.com | Hacker News

A new certificate generation tool was built in Go, eliminating external dependencies and improving security features.
Node JS
fromSecurityWeek
4 weeks ago

Guardarian Users Targeted With Malicious Strapi NPM Packages

A supply chain attack targeting the Strapi ecosystem involved 36 malicious NPM packages delivering various harmful payloads.
#cybersecurity
Node JS
fromThe Hacker News
1 month ago

36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants

36 malicious npm packages disguised as Strapi CMS plugins facilitate exploitation and credential harvesting.
Node JS
fromInfoQ
1 month ago

Are We Ready for the Next Cyber Security Crisis Like Log4shell?

Organizations are not prepared for the next cybersecurity crisis, similar to Log4Shell.
Node JS
fromThe Hacker News
1 month ago

36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants

36 malicious npm packages disguised as Strapi CMS plugins facilitate exploitation and credential harvesting.
Node JS
fromInfoQ
1 month ago

Are We Ready for the Next Cyber Security Crisis Like Log4shell?

Organizations are not prepared for the next cybersecurity crisis, similar to Log4Shell.
#npm
Node JS
fromInfoQ
1 month ago

Axios npm Package Compromised in Supply Chain Attack

A significant supply chain attack on Axios introduced a Remote Access Trojan via hijacked maintainer accounts, affecting numerous developer environments.
Node JS
fromBleepingComputer
1 month ago

Hackers compromise Axios npm package to drop cross-platform malware

Hackers compromised the Axios npm account to distribute remote access trojans across multiple operating systems.
Node JS
fromTheregister
1 month ago

Top npm package backdoored to drop dirty RAT on dev machines

A widely used npm library, axios, was compromised to deliver malware through a maintainer's hijacked account.
Node JS
fromInfoQ
1 month ago

Axios npm Package Compromised in Supply Chain Attack

A significant supply chain attack on Axios introduced a Remote Access Trojan via hijacked maintainer accounts, affecting numerous developer environments.
Node JS
fromBleepingComputer
1 month ago

Hackers compromise Axios npm package to drop cross-platform malware

Hackers compromised the Axios npm account to distribute remote access trojans across multiple operating systems.
Node JS
fromTheregister
1 month ago

Top npm package backdoored to drop dirty RAT on dev machines

A widely used npm library, axios, was compromised to deliver malware through a maintainer's hijacked account.
Node JS
fromTreehouse Blog
1 month ago

How to Build Your First Full Stack App as a Beginner

Building a simple full stack project enhances understanding of front end, back end, and database interactions beyond theoretical knowledge.
Node JS
fromhowtocenterdiv.com
1 month ago

Database Performance Bottlenecks: N+1 Queries, Missing Indexes, and Connection Pools

Database issues, like missing indexes and N+1 queries, are often overlooked in software engineering, leading to persistent performance problems.
fromZDNET
1 month ago

How this strange little distro can boost your Linux skills

Peropesis is a command-line-only OS that can only be run as a live instance. Users log in with the root user and should change the password immediately.
Node JS
Node JS
fromInfoQ
1 month ago

Inside Netflix's Graph Abstraction: Handling 650TB of Graph Data in Milliseconds Globally

Netflix engineers developed Graph Abstraction to manage large-scale graph data in real time, enabling fast queries and supporting various internal services.
Node JS
fromInfoQ
1 month ago

QCon London 2026: Running AI at the Edge - Running Real Workloads Directly in the Browser

Running AI in the browser enhances privacy, reduces latency, and lowers costs by eliminating reliance on third-party cloud services.
Node JS
fromThe Hacker News
1 month ago

North Korean Hackers Abuse VS Code Auto-Run Tasks to Deploy StoatWaffle Malware

North Korean threat actors use StoatWaffle malware via malicious VS Code projects to steal data and execute commands on infected systems.
Node JS
fromDEV Community
1 month ago

I Scanned 10 Popular GitHub Actions Workflows for Undocumented Environment Variables. Here's What I Found.

Many popular JavaScript projects have undocumented environment variables in their GitHub Actions workflows, leading to potential issues for developers forking these projects.
Node JS
fromInfoWorld
1 month ago

Edge.js launched to run Node.js for AI

Edge.js is a WebAssembly-based JavaScript runtime that safely executes Node.js applications with faster startup times by sandboxing workloads through WASIX.
Node JS
fromDEV Community
1 month ago

Why I Stopped Maintaining .env.example by Hand

A new tool automatically discovers environment variables used in Node.js code to prevent stale .env.example files from causing deployment failures.
Node JS
fromgithub.com
1 month ago

zahhar/ghcp-dashboard: Dashboard with Github Copilot Metrics

A lightweight Node.js dashboard aggregates GitHub Copilot usage metrics via REST API to display team adoption patterns, user engagement, and model/IDE preferences through a browser-based leaderboard interface.
Node JS
fromAllthingssmitty
1 month ago

Native JSON modules are finally real - Matt Smith

Import attributes enable native JSON module support in JavaScript, eliminating the need for bundler transforms by allowing explicit type declaration with the `with { type: "json" }` syntax.
Node JS
fromInfoWorld
1 month ago

TypeScript 6.0 reaches release candidate stage

TypeScript 6.0 reached release candidate stage with improved type checking for function expressions in generic calls, scheduled for general availability on March 17.
Node JS
fromTechzine Global
1 month ago

New npm browser npmx addresses shortcomings of npmjs

Npmx, an open-source alternative interface to npm's official website, addresses widespread developer dissatisfaction with the current package registry's user experience and presentation of package information.
Node JS
fromInfoWorld
2 months ago

Why local-first matters for JavaScript

JavaScript innovation accelerates through local-first SQL datastores, universal isomorphic JavaScript via WinterTC, reactive signals adoption, NPM alternatives, Java-JavaScript bridges, and Deno's resurgence.
fromTheregister
2 months ago

npmx alternative to npmjs released to fix pain of rpm

npmx is about speed and simplicity. It gives you useful data like install size, module format and outdated dependencies ... we're also building social features into npmx because open source is better when it's easier to connect with the people behind the packages.
Node JS
Node JS
fromDevOps.com
2 months ago

Malicious NPM Package Gets Downloaded 50K Times Before Discovery - DevOps.com

A malicious npm package downloaded 50,000 times used naming deception and preinstall script hooks to evade detection and compromise Windows, Linux, and macOS systems.
Node JS
fromMedium
2 months ago

Why your Vitest test suite is slow (and how to fix it)

A team successfully migrated their large React project from Jest to Vitest and optimized performance to exceed Jest speeds through configuration and strategic improvements.
Node JS
fromTheregister
2 months ago

Feel the burn: Open source developers decide to take a break

Open source culture incentivizes sustained overwork, making developer burnout structural, so intentional rest and balance are necessary for long-term OSS sustainability.
Node JS
fromkrasimirtsonev.com
2 months ago

Nice try dear AI. Now let's talk about production.

AI-assisted code generation remains a tool that cannot fully replace senior software engineers; programming fundamentals and human oversight remain essential.
Node JS
fromInfoWorld
2 months ago

WinterTC: Write once, run anywhere (for real this time)

Unified JavaScript runtime standard WinterTC creates a consistent guaranteed API surface across browsers, servers, and edge runtimes to reduce fragmentation.
fromVue.js Jobs
2 months ago

Software Development Engineer III - Core CRM at HighLevel - VueJobs

HighLevel is an AI powered, all-in-one white-label sales & marketing platform that empowers agencies, entrepreneurs, and businesses to elevate their digital presence and drive growth. We are proud to support a global and growing community of over 2 million businesses, comprised of agencies, consultants, and businesses of all sizes and industries. HighLevel empowers users with all the tools needed to capture, nurture, and close new leads into repeat customers.
Node JS
fromLogRocket Blog
2 months ago

How to solve package validation pain with Publint - LogRocket Blog

Package validation is the process of verifying that your library is correctly structured, configured, and ready to be consumed by others before you publish it. It's not about checking whether your logic works. That's what tests are for. It's about making sure your package metadata, entry points, module formats, and published files all line up so that consumers can install and use it without unexpected runtime errors.
Node JS
Node JS
fromGitHub
2 months ago

GitHub - webllm/browser-use: browser-use for TypeScript: AI-Powered Browser Automation from Python's Acclaimed Library

A faithful TypeScript port brings AI-driven browser automation, vision capabilities, and LLM integrations to Node.js, Deno, and Bun with Python feature parity.
[ Load more ]