looking at osv, most of the reports on npm is due to malicious code. Is that right? I find around 85% of malware in the dataset.

Last week we launched 6 integrations in 5 days. Here's what you need to know!

You can just ship ESM now 🚀 Node.js 18 is going to reach EOL in April and Node.js 20 and newer can require(esm) so no need for dual packages anymore! 📦

“Use the best tool for the job” continues to mean “I started by assuming I’d use my favorite language and then worked backwards from there and now I want to sound objective about it”

Just CFPed @reactsummit.gitnation.org NYC. I would be so excited to give this talk, wish me luck!

This is insane and pretty cool!

How Does Prototype Pollution Work? www.nodejs-security.com/blog/underst...

I miss living in Australia. Paradoxically, the loneliness of not knowing anyone made me feel so free.

AppSec and QA in the Era of Vibe Coding is going to be awesome

Sooo, new sprint, new blogpost. Once again, there are some CDP involved :p This time, I show how to use multiple languages with a same @playwright.dev browser at once! www.heal.dev/docs/blog/pw...

Ok I have the best talk idea ever, a talk so great I am sure I will get some VC reaching out to fund its topic. Now, this is a talk about nextjs (or react+node) and AI, where should I CFP it?

Get ready for the ultimate developer conference experience! Join us in London for an action-packed event featuring: ✅ 35 talks across 3 tracks ✅ 6 hands-on workshops covering TypeScript, React, Angular, and AI ✅ FREE community events 🎟️ london.cityjsconf.org

#Speaker #Announcement 🚀 The News of JavaScript’s Death Has Been Greatly Exaggerated! Join Vladimir @v2t.dev , CEO of heal.dev & Node.js core collaborator, as he explores why JS keeps thriving! #JavaScript #TechTalk Register now 🎟️ london.cityjsconf.org

I just published a new blogpost on testing WebAuthn! WebAuthn is a modern authentication system that allows great user experiences such as Touch ID or Face ID! In this post, I give an overview of WebAuthn and how to test apps that uses it! Link to the post in the comments!

When building an AI-enabled app, always ask, "Who is accountable for the decisions of that system?" If the answer is "I don't know" or "no one", I have some bad news for you

Accurate summary of my journey building an AI-based product. Right now, we’re shipping features at high speed—things that were considered impossible not so long ago, and that many would never believe are actually doable (can't wait to share them!). What’s next? (DM open if you want to see magic)

Exclusive: The backdoor inserted in v1.95.7 adds an "addToQueue" function which exfiltrates the private key through seemingly-legitimate CloudFlare headers. Calls to this function are then inserted in various places that (legitimately) access the private key.

This has not aged a bit

Yeah, sex is great, but have you ever written a RFC that * handles most common customer requests * provides stellar UX * Is technically brilliant?

relatable

GenAI we want: remove the most tedious tasks from our daily job to focus on the most creative bits. GenAI we get, spam, spam, spam and a bit more spam. Feel free to reach out if you want a really useful AI-based copilot to test and help you fix web applications!

People in tech are too liberal with the use of the word "standard"

Who would be interested in a global #JavaScript #meetup in VR on learn.framevr.io ?

Is there a list of @nodejs.org on bsky ? Trying to build back my follow list :D