Malicious JavaScript code delivered by the AppsFlyer Web SDK hijacked cryptocurrency, potentially in a supply-chain attack.

Pun runs JavaScript and TypeScript natively, installs dependencies, builds production bundles, and runs tests without configuration. Built in Rust for speed and reliability.

Vulnerability alerts and dependency updates haunt us these days, especially when they surface in user-facing dependencies. Obviously, we want to fix these issues as quickly as possible, though with ...