The Microsoft Defender team has discovered a coordinated campaign targeting software developers through malicious repositories posing as legitimate Next.js projects and technical assessment materials, ...

The JavaScript library is now under the umbrella of the Linux Foundation, a new foundation takes over ownership and will organize governance in the future.

Devographics' annual State of React survey shows that React retains its dominant position, but is also raising more and more ...

Not everyone's convinced React belongs on the server as well as in the browser Devographics has published its State of React ...

Microsoft has released the beta version for TypeScript 6.0, the last release with the current JavaScript codebase. From version 7.0 onwards, the compiler and the language service will be written in Go ...

Amazon opened up its Prebid adapter for beta testing on January 21. Publishers are preparing to test, and we spoke with several to learn how.

In December 2024, the popular Ultralytics AI library was compromised, installing malicious code that hijacked system resources for cryptocurrency mining. In August 2025, malicious Nx packages leaked 2 ...

Alpine.js is a front-end JavaScript framework fashioned like a lightweight backpack, with a minimalist API and thoughtful features. Let's give it a try.

A critical vulnerability in the popular expr-eval JavaScript library, with over 800,000 weekly downloads on NPM, can be exploited to execute code remotely through maliciously crafted input. The ...

NPM developer qix's account compromise potentially puts user funds at risk by compromising library dependencies used by bitcoin wallets. A major NPM developer, qix, has had their account compromised.

React conquered XSS? Think again. That's the reality facing JavaScript developers in 2025, where attackers have quietly evolved their injection techniques to exploit everything from prototype ...

Remix, the modern React framework, has officially joined Shopify and will now power their Hydrogen framework. In this episode, we explore what this means for developers, how it contrasts with ...