AI Security •
How to Detect npm Encrypted Loader Malware: 3.1M Downloads
Detect npm encrypted loader malware before it runs: the trigger matrix, AES-256-GCM payload, and IOCs behind mathmain's 3.1M weekly downloads.
9 min read
Read more →
AI Security •
Fix the libheif AVIF RCE: A CVSS 9.8 Bug in Sharp and Next.js
A CVSS 9.8 heap-buffer-overflow in libheif AVIF RCE (CVE-2026-84383) reaches Sharp, libvips, ImageMagick, and Next.js. Here's who's exposed and how to patch.
8 min read
Read more →
AI Security •
Axios Compromised on npm: 1.14.1, 0.30.4 Drop a Cross-Platform RAT
Axios compromised on npm on March 31, 2026: versions 1.14.1 and 0.30.4 dropped a cross-platform RAT. Verified timeline, impact, IOCs, and recovery.
4 min read
Read more →
Web Engineering •
Node.js Pointer Compression: Cut Heap Memory ~50%
V8 pointer compression finally lands in Node.js: one Docker image swap cuts heap memory ~50%, improves P99 latency, and can save $80K-$300K a year.
17 min read
Read more →
Web Engineering •
Node.js Backend for Frontend Developers: A Practical Guide
A frontend developer's guide to building a Node.js backend: Express, REST APIs, middleware, databases, auth, and deployment — plus the mindset shift you need.
8 min read
Read more →