The biggest story of the week is a new massive supply chain breach, which appears to be unrelated to the previous massive supply chain breaches, this time of the Axios HTTP project. Axios was ...

The OpenJS Foundation has launched a new program to support companies in switching to current Node.js versions.

Developers can now use all ACP-compatible AI agents and receive basic features for JavaScript and TypeScript for free – ...

In 2026, entry-level and transition roles often expect more than passive course completion. Employers want to see that you can write queries that answer business questions, work with browser logic, ...

JavaOne Oracle has shipped Java 26, a short-term release, and introduced Project Detroit, which promises faster interop ...

Axios, a widely used JavaScript HTTP client, was briefly distributed through npm in two malicious versions after a maintainer ...

Trump raised concerns that colleges use personal statements and other proxies to consider race, which he views as illegal ...

An attacker compromised the npm account of a lead Axios maintainer on March 30, and used it to publish two malicious versions ...

Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...

Some call it magic -- the ability to make objects appear suddenly out of nowhere. You can create this kind of magic on your website using a few lines of JavaScript ...

A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...

Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...