Corwin

@corwinmarsh.com

🕸️ Web Dev. React, TypeScript, Node.js 🤖 Pi agent 💻 Senior Architect at Slalom 👶 Girl Dad corwinmarsh.com

Excited for this one. Reading the changelog it looks like we won’t have to enable any flags for the latest features and we need to make sure we are not using react-router-dom still, which we already shouldn’t be using and totally cleaned those all up… right?

React Router@reactrouter.com · 2mo ago

React Router v8 is now in prerelease mode! Please give it a try and let us know if you running into any issues. Learn more by reading the changelog: github.com/remix-run/re...

Today, TanStack packages have been compromised. Again, this all started with a "pull_request_target" GitHub action trigger. TL;DR for open-source maintainers: 🚫 NEVER use "pull_request_target" workflows 🚫 NEVER use shared caches in your publish pipeline

Bild

🚨 Active supply chain attack on TanStack. 84 npm packages compromised, including react-router (12M+ weekly downloads). The malware is a self-propagating worm: steals GitHub Actions OIDC tokens, republishes itself to npm as the compromised maintainer. Socket flagged every version within 6 minutes.

Bild

Your friendly, weekly PSA that you don't have to change the world, you just have to survive it. You change it just by participating in it. When times are rough, remember that that's enough

Thinking about attending CascadiaJS solo? Do it! We created Cascadia Connect as a low-pressure way to meet other cool humans at the conference. A few things we have planned are: 🦩 Birds of a feather tables 💬 "Ask me about" conversation starters 🎲 Low-key games ☕️ Pair Programming IRL

CascadiaJS Web + AI Conf. Grow Your Network. Level up, Grow your network, Have fun in the PNW. June 1 - 2, 2026. Seattle, WA.

I’m going to go for a reverse April fools day and instead of making jokes, I’m going to be sad and depressed and generally not funny instead.