Hackers have injected credential-stealing malware into newly published versions of node-ipc, a popular inter-process communication package, in a new supply chain attack targeting npm. The node-ipc ...

The Extensions SDK can be used to "expand, reshape and customize" Live Suite with new tools and features ...

Matteo Collina has proposed a Virtual File System (VFS) for Node.js core through the node:vfs module. The proposal includes about 19,000 lines of code and addresses common workflow challenges. While ...

A critical vulnerability in the popular Node.js sandboxing library vm2 allows escaping the sandbox and executing arbitrary code on the host system. The security issue is tracked as CVE-2026-26956 and ...

Microsoft’s new Surface RTX Spark Dev Box packs Nvidia Blackwell AI power and 128GB of unified memory to run large AI models ...

Microsoft unveils Surface RTX Spark Dev Box with 1 petaflop AI performance, 128GB memory, and NVIDIA RTX Spark hardware.

Microsoft unveiled a series of major AI-focused announcements at its Build 2026 developer conference, including the new ...

GitHub launches a new Copilot desktop app with AI agents, code review upgrades, sandboxes, and automation tools for ...

Developer platform Socket says a malware called TrapDoor is targeting crypto and AI developers across npm, PyPI and Crates, aiming to steal crypto wallet info and browser data.

The United States announced sanctions on Iran’s biggest cryptocurrency exchange on Tuesday, accusing it of enabling the Iranian government and blacklisted state institutions to circumvent Western ...

Attackers hijacked a dormant npm maintainer account and pushed malicious node-ipc versions that steal crypto keys, AWS tokens ...