DEV · Tooling
Vite+ beta unifies runtime, package manager and tools including Vite 8, Vitest, Rolldown, tsdown, Oxlint and Oxfmt behind one CLI. Commands such as vp dev, vp test, vp build and vp migrate provide a consistent workflow. …
DEV · Security
A former DigitalMint negotiator received 70 months in prison for providing BlackCat ransomware operators with confidential victim negotiation data to inflate demands. Five clients paid over $75 million in inflated ransom…
DEV · News
Microsoft says generative AI is now part of its vulnerability management process, especially for Windows and other products. The company says LLMs help surface issues earlier, while human engineers still handle validatio…
DEV · Reads
The official jscrambler npm package was compromised at version 8.14.0, introducing malicious code into the dependency chain. Developers using this version should update immediately and audit their projects for potential …
DEV · Security
Nebula Security's AI-driven bug-hunting tool VEGA discovered GhostLock (CVE-2026-43499), a use-after-free vulnerability lurking in the Linux kernel since 2011. The flaw grants any logged-in user root access on unpatched …
DEV · News
Apple has filed a lawsuit against OpenAI in federal court in Northern California, accusing the company and its hardware arm io Products, along with two former Apple executives, of organizing the collection of industrial …
DEV · Security
Django has released versions 6.0.7 and 5.2.16 to address three low-severity security issues across supported branches. The fixes cover a cached Set-Cookie exposure risk, a heap buffer over-read in GDALRaster, and a heade…
DEV · Releases
Microsoft has officially released TypeScript 7.0, marking a major architectural shift. By rewriting the compiler almost entirely in Go and introducing parallelized workflows, the new engine achieves compilation speeds ro…
DEV · Reads
The Reddit thread explores reasons developers are moving from GitHub to Codeberg and self-hosted options. It highlights concerns around platform policies, pricing changes, data control, and the appeal of community-owned …
DEV · Reads
This short item is worth reading because it flags a serious Linux vulnerability affecting virtualized environments and notes a $250K reward tied to it. For developers running workloads in VMs or managing cloud infrastruc…
DEV · News
A Rust reimplementation of PostgreSQL has achieved 100% compatibility with the official Postgres regression test suite. This milestone demonstrates the feasibility of rebuilding a complex database engine in Rust while ma…
DEV · Releases
Node.js 26.5.0 is now available. This release includes bug fixes, performance improvements, and updates to core dependencies. Check the official changelog for detailed updates affecting your projects.