#Javascript

AI Didn't Kill JS Obfuscation, It Repriced It

LLMs erased renaming and shred obfuscator.io defaults, but runtime-dependent and polymorphic protection still costs attackers real money.

Article · 3d ago3

Coaction Puts Zustand's API on Vue's Signal Engine

Auto-tracked renders and cached getters are the right design; three majors in four weeks from one maintainer is the catch.

Article · 3d ago3

Sentry's Double-Counted Tool Calls Are a Warning for AI Telemetry

A streaming double-count in Sentry's Google GenAI integration shows why instrumentation deserves the same rigor as production code.

Article · 1w ago0

Write a Custom ESLint Plugin to Enforce Your Team's Coding Standards

Build, test, and ship an ESLint rule that blocks your team's anti-patterns at commit time.

Tutorial · 2w ago0

Adform's Breach Made the Ad Tracker the Malware

A trojanized trackpoint-async.js swapped crypto wallet addresses across thousands of sites while every scanner called it clean.

Article · 3w ago2

Shai-Hulud Returns, and Provenance Signed the Malware

The worm behind the keyv compromise rode a legitimate GitHub Actions pipeline straight past npm's newest defenses.

Article · 3w ago5

Web Components Finally Learn Progressive Enhancement

A 2.9kB library named Elena bets your design system belongs to the platform, not the framework.

Article · 4w ago0

Your Best npm Defense Is Waiting 24 Hours

Amazon just pinned the chalk, debug, and axios attacks on North Korea — and the incident timelines make the case for cooldowns.

Article · 4w ago0

Build a Voice Assistant with the OpenAI Realtime API and WebRTC

Wire a browser to gpt-realtime-2.1 over WebRTC for interruptible voice chat with function calling.

Tutorial · 1mo ago0

htmx 4.0 Ships on Game Boy Before It Ships on npm

The cartridge is a real playable game, and the rewrite it's teasing deserves more attention than the meme.

Article · 1mo ago0

npm's Cooldown Works Because You Never Vetted Anything

The security-theater critique misreads who actually catches registry malware — but it's right about what attackers do next.

Article · 1mo ago0

Primate Owns the Stack Without Owning You

A universal framework that mixes React, Svelte, Go, and Bun under one model. Real idea, early ecosystem.

Article · 1mo ago2

Telegram Serverless Cuts the Bot Hosting Tax

Co-located V8 isolates and a built-in SQLite store rewrite how Telegram bots get backends.

Article · 1mo ago1

Bun's All-in-One Toolchain Is Ready for Work

The runtime, package manager, and test runner now form a practical daily stack for Node-shaped projects.

Article · 1mo ago5

Master Chrome DevTools for JavaScript Debugging

Fix a real NaN bug and a real CPU freeze in a tiny demo app, using only the Sources, Network, and Performance panels.

Tutorial · 1mo ago1