Meligy

NPM package caught using QR Code to fetch cookie-stealing malware Newly discovered npm package 'fezbox' employs QR codes to hide a second-stage payload to steal cookies from a user's web browser. The package, masquerading as a utility library, leverages this innovative steganographic technique to harvest sensitive data, such as user credentials, from a comp ...

Newly discovered npm package 'fezbox' employs QR codes to hide a second-stage payload to steal cookies from a user's web browser. The package, masquerading as a utility library, leverages this innovative steganographic technique to harvest sensitive data, such as user credentials, from a comp ...

Rethinking GraphQL Frontends with Robert Balicki - Software Engineering Daily A challenge in modern frontend application design is efficiently fetching and managing GraphQL data while keeping UI components responsive and maintainable. Developers often face issues like over-fetc...

Robert Balicki is a Staff Engineer at Pinterest and creator of the open-source project Isograph. He joins Gregor Vand to discuss challenges and solutions for managing data in frontend apps.

@statisticsftw.bsky.social

softwareengineeringdaily.com/2025/09/23/i...

Cloud models · Ollama Blog Cloud models are now in preview, letting you run larger models with fast, datacenter-grade hardware. You can keep using your local tools while running larger models that wouldn’t fit on a personal com...

Cloud models are now in preview, letting you run larger models with fast, datacenter-grade hardware

ollama.com/blog/cloud-m...

Release pnpm 10.16 · pnpm/pnpm Minor Changes There have been several incidents recently where popular packages were successfully attacked. To reduce the risk of installing a compromised version, we are introducing a new settin...

pnpm v10.16.0 adds "minimumReleaseAge", a setting for defining how long a version has to have been published before pnpm will install it.

A nice countermeasure against accidental installs of short-lived compromised packages before they get taken down. Not a 100% fix, but a great additional step!

A Complete Next.js Streaming Guide: loading.tsx, Suspense, and Performance When building modern web apps, speed isn’t just about fast loading — it’s about feeling fast. Users expect immediate feedback, even when…

“A Complete Next.js Streaming Guide: loading.tsx, Suspense, and Performance”

medium.com/@aalbertini9...

#nextjs #reactjs #webperf #frontendDev #javascript

I can't wait for auto imports to be implemented. This is the only thing stopping me from using tsgo as a fault driver

Component Composition is great btw Component composition is one of the best parts of React, and I think we should take more time to break our components into manageable parts before littering one component with conditional renderings.

This is probably one of my best articles that isn’t about React Query. I just re-read it and love everything about it. I probably peaked at that time. Give it a read:

There's a powerful React feature called streaming that you can also use in your Next.js apps. And in this handbook, Sumit teaches you all about streaming and how it works in Next. You'll also learn about SSR, automatic vs manual streaming, React Suspense, & more.
www.freecodecamp.org/news/the-nex...

React server component testing example for Next.js notes app: "note editor saves note and redirects after submitting note"

Full speed ahead on component testing for React Server Components!

✅ vitest-plugin-rsc canary now on npm
✅ vite RSC refactor for testing support
✅ @nextjs.org context providers
✅ Notes app demo with tests

👉 github.com/kasperpeulen...

Thanks a lot for that buddy 🌹

Next.js Promise Racing Learn how you can use Next.js' and React's primitives to achieve a neat party trick: Conditionally show a loading spinner based on a given wait time.

I thought this was a feature of Suspense itself but reading playfulprogramming.com/posts/nextjs... and checking Suspense docs, it looks like it isn't. It seems like it's not there. Is it covered by useTransition? Is it not implemented in current drops?

Thanks a lot.

Next.js Promise Racing Learn how you can use Next.js' and React's primitives to achieve a neat party trick: Conditionally show a loading spinner based on a given wait time.

@danabra.mov I remember in an earlier demo of Suspense you showed a data fetch not showing loading right away but only if data fetch takes a while.

- If _this_ component re-renders, it has the same `children` prop ref as before, so its immediate child will be skipped, and then it's just which nested components accessed context
- If this comp's _parent_ re-renders, it's passing a new `children` ref in here, so its children render

Node.js — Node v24.2.0 (Current) Node.js® is a JavaScript runtime built on Chrome's V8 JavaScript engine.

Node.js release day: 24.2.0 is out ! More Explicit Resource Management support, import.meta.main, and much more – see download information and full changelog at nodejs.org/en/blog/rele...

AspiriFridays with David, Damian, and Maddy - Bitwarden YouTube video by dotnet

Can @davidfowl.com @maddymontaquila.net & @damianedwards.com add .NET Aspire goodness to a real-world ASP.NET Core app on a Friday afternoon? Yes, they can! 🎉 Watch @Bitwarden's open-source .NET code base get Aspirified on #AspiriFridays: www.youtube.com/live/UjQ-fVk...

Introduction Welcome to the Mock Service Worker documentation!

Major MSW docs rewrite is here! 🎉

I've finally found time to complete this change last weekend. Let's talk about what's new! 👇

mswjs.io/docs/

How did you prepare / practice your in-person talks before to ensure they fit the assigned time?

Not saying this should be the answer to your current question too. I actually have the same problem you mention, with both videos and live talk prep.

i'm writing "RSC for _ Developers" where _ is your favorite framework / language / whatever.

what "_" do you want to see represented?

Also, just for fun, and since this is my actual background, "for asp .net core developers"

I know this can sound stupid, but "next.js developers".

The positioning here is next.js developers who think they know RSCs but they don't really, if that's a big enough thing in your opinion.

Is it just me or the amount of non tech posts by tech people here is much more than on X?

The Query Options API v5 brought a new, powerful API, especially if you're using React Query with TypeScript...

@t3.gg I need to point out that queryOptions addresses some of the type-safety issues between cache entries, getQueryData and setQueryData. You might want to give this a read: tkdodo.eu/blog/the-que...

What’s new in the world of LLMs, for NICAR 2025 I presented two sessions at the NICAR 2025 data journalism conference this year. The first was this one based on my review of LLMs in 2024, extended by several months …

... and the full slides and detailed notes from my other NICAR talk yesterday, "What’s new in the world of LLMs" https://simonwillison.net/2025/Mar/8/nicar-llms/

Get insights from multimodal content with Amazon Bedrock Data Automation, now generally available | Amazon Web Services Amazon Bedrock Data Automation streamlines the extraction of valuable insights from unstructured multimodal content (documents, images, audio, and videos) by providing a simplified way to build…

📢 Just launched! Amazon Bedrock Data Automation is now generally available, making it easier to extract insights from multimodal content like documents, images, audio, and videos. Check out my blog post ✍️ with sample code 👇

aws.amazon.com/blogs/aws/ge...

#AWS #AI #GenerativeAI #MachineLearning

From zero to hero with identity and access control in Azure Kubernetes Service | Microsoft Community Hub Kubernetes administrators transitioning to Azure Kubernetes Service (AKS) often face challenges in understanding how authentication and authorization work in...

From zero to hero with identity and access control in #AzureKubernetesService by Ricardo Martins techcommunity.microsoft.com/t5/startups-...

Do you measure your TS libraries type perf?

@ssalbdivad.dev built his own testing tool for this to keep @arktype.io fast!

https://creators.spotify.com/pod/show/devtoolsfm/episodes/David-Blass----ArkType--better-runtime-type-validation-e2uvake
https://www.youtube.com/watch?v=JxAaWsAAQxM

Yes. I used the Chrome extension to find people that I followed there. Thanks for the greeting 👋

OpenAI just introduced GPT-4.5, the newest version of GPT, with better factual accuracy, fewer hallucinations, and improved conversational skills like picking up subtle human emotions and understanding what users actually want

Why is HybridCache Still in Preview After .NET 9 Release? · Issue #59702 · dotnet/aspnetcore .NET 9 is now generally available as of November 12, 2024 (source: GitHub Release Notes). One of the new features in .NET 9 is HybridCache, a library that combines the best of both caching approach...

HybridCache will be released to GA in March github.com/dotnet/aspne... #dotnet #aspnetcore