looking at osv, most of the reports on npm is due to malicious code. Is that right? I find around 85% of malware in the dataset.
Vladimir de Turckheim
@v2t.dev
Web, AI Agents and LLM - often Node.js diagnostics
Last week we launched 6 integrations in 5 days. Here's what you need to know!
AgentQL Integrations: The Agentic Web begins now that every page is an enpoint | AgentQL
Last week, we launched six major integrationseach one a step toward a fully accessible Web, where data flows freely between people, AI agents, and smart workflo...
agentql.com
You can just ship ESM now 🚀 Node.js 18 is going to reach EOL in April and Node.js 20 and newer can require(esm) so no need for dual packages anymore! 📦
“Use the best tool for the job” continues to mean “I started by assuming I’d use my favorite language and then worked backwards from there and now I want to sound objective about it”
Just CFPed @reactsummit.gitnation.org NYC. I would be so excited to give this talk, wish me luck!
How Does Prototype Pollution Work? www.nodejs-security.com/blog/underst...
Understanding and Preventing Prototype Pollution in Node.js
Learn about Prototype Pollution in Node.js: what it is, how it works, and how to prevent it. Includes real-world examples and security best practices for developers.
nodejs-security.com
I miss living in Australia. Paradoxically, the loneliness of not knowing anyone made me feel so free.
AppSec and QA in the Era of Vibe Coding is going to be awesome
Sooo, new sprint, new blogpost. Once again, there are some CDP involved :p This time, I show how to use multiple languages with a same @playwright.dev browser at once! www.heal.dev/docs/blog/pw...
Playwright Goes Polyglot: Leveraging Python and Node for Next-Level Testing | heal.dev blog
Playwright is an extremely popular library for browser automation.
heal.dev
Ok I have the best talk idea ever, a talk so great I am sure I will get some VC reaching out to fund its topic. Now, this is a talk about nextjs (or react+node) and AI, where should I CFP it?
Get ready for the ultimate developer conference experience! Join us in London for an action-packed event featuring: ✅ 35 talks across 3 tracks ✅ 6 hands-on workshops covering TypeScript, React, Angular, and AI ✅ FREE community events 🎟️ london.cityjsconf.org
#Speaker #Announcement 🚀 The News of JavaScript’s Death Has Been Greatly Exaggerated! Join Vladimir @v2t.dev , CEO of heal.dev & Node.js core collaborator, as he explores why JS keeps thriving! #JavaScript #TechTalk Register now 🎟️ london.cityjsconf.org
I just published a new blogpost on testing WebAuthn! WebAuthn is a modern authentication system that allows great user experiences such as Touch ID or Face ID! In this post, I give an overview of WebAuthn and how to test apps that uses it! Link to the post in the comments!
When building an AI-enabled app, always ask, "Who is accountable for the decisions of that system?" If the answer is "I don't know" or "no one", I have some bad news for you
Accurate summary of my journey building an AI-based product. Right now, we’re shipping features at high speed—things that were considered impossible not so long ago, and that many would never believe are actually doable (can't wait to share them!). What’s next? (DM open if you want to see magic)
Exclusive: The backdoor inserted in v1.95.7 adds an "addToQueue" function which exfiltrates the private key through seemingly-legitimate CloudFlare headers. Calls to this function are then inserted in various places that (legitimately) access the private key.
Socket@socket.dev · 2y ago🚨 A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular #Solana web3.js library. The injected code captures private keys and transmits them to a hardcoded address. This is a developing story. socket.dev/blog/supply-... #crypto #cybersecurity
Yeah, sex is great, but have you ever written a RFC that * handles most common customer requests * provides stellar UX * Is technically brilliant?
GenAI we want: remove the most tedious tasks from our daily job to focus on the most creative bits. GenAI we get, spam, spam, spam and a bit more spam. Feel free to reach out if you want a really useful AI-based copilot to test and help you fix web applications!
People in tech are too liberal with the use of the word "standard"
Who would be interested in a global #JavaScript #meetup in VR on learn.framevr.io ?
Frame - Immersive Meetings, Classes, Events
Frames are immersive collaboration spaces supercharged with artificial intelligence. Personal, playful, and powerful remote meetings, virtual classrooms, and event spaces - in the metaverse.
learn.framevr.io
Is there a list of @nodejs.org on bsky ? Trying to build back my follow list :D