New PhantomRaven NPM attack wave steals dev data via 88 packages

New attack waves from the 'PhantomRaven' supply-chain campaign are hitting the npm registry, with dozens of malicious packages that exfiltrate sensitive data from JavaScript developers.
InfoQ

Webpack Publishes 2026 Roadmap with Native CSS Support, Universal Target, and Path to Version 6

Webpack's 2026 roadmap, led by Even Stensberg, unveils substantial enhancements aimed at modernizing the bundler. Key ...
Tech Times

How to Build a Tech Portfolio That Impresses Employers and Lands You a Job in 2026

Build a tech portfolio to get hired with projects, GitHub metrics, blogs, and demos that impress employers and showcase your ...
InfoWorld

Why local-first matters for JavaScript

Every developer should be paying attention to the local-first architecture movement and what it means for JavaScript. Here’s ...
GitHub

NextSolution V2 (ASP.NET API with Next.js, and Expo)

This starter template combines an ASP.NET API 🖥️ with a Next.js (React) web application 🌐 and an Expo (React Native) mobile app 📱 to provide a solid foundation for building full-stack applications ...
GitHub

Tambo AI

Tambo is a fullstack solution for adding generative UI to your app. You get a React SDK plus a backend that handles conversation state and agent execution. 1. Agent included — Tambo runs the LLM ...