For Cloudflare, the Deno buy is an acquihire for Dahl and 12 of his Deno colleagues, who will work to build out Cloudflare’s Workers platform, expanding it for potential open-source use. He feels this ...

The Node2Shell vulnerability in Brotli is under active attack. Patch Node.js to 26.12.1, 24.22.1 or 22.23.4 now.

Node.js fixes 10 flaws, including a Brotli decoder bug that may allow code execution when apps decompress attacker-controlled ...

OpenCode is a free, open-source AI coding agent. At first glance, it may look like another Claude Code alternative, but there ...

Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.

Draw Things released Local Code, an open-source AI assistant for Mac, in a post dated October 28, 2026. MacRumors reported on ...

On October 21, 2026, Node.js released v22.23.4, v24.22.1, and v26.12.1, which fix 10 vulnerabilities. The most severe, ...

OpenAI found a remote code execution flaw in the Brotli compression library, prompting Node.js, Bun, Envoy and PyPI maintainers to ship patches.

In some cases this results in clean-room— meaning theoretically legal — projects like ArtCraft, a free, vibe coded recreation ...

A security update released October 21 fixes ten vulnerabilities across Node.js 26.x, 24.x, and 22.x, including an out-of-bounds write in the Brotli decompression library.

Commenters on Lobsters ask what developers plan for the weekend, revealing maintenance marathons, new builds, and growing ...

Google Modern Web Guidance helps AI coding agents follow modern web standards for accessibility, performance, security and ...