CSOonline

Developer sabotages own npm module prompting open-source supply chain security questions

The node-ipc developer attempt to protest Russia's attack on Ukraine has the unintended consequence of casting more doubt in software supply chain integrity. The developer of a popular JavaScript ...
InfoWorld

Deno 1.30 backs built-in Node.js modules

Version 1.30 of the Deno JavaScript/TypeScript runtime, published late January 2023, emphasizes support for built-in Node.js modules and offers a major update to the configuration file. Deno 1.30 was ...
InfoWorld

Node.js 22 arrives, backs ECMAScript modules

The latest Node release includes require() support for ES modules, improved WebSocket communications, and an update to Google's V8 JavaScript engine 2.4. Node.js 22 ...

Yarn and Corepack are being removed from Docker's node:lts — How to pin versions, write code that works on both 24 and 26, and a one-liner to test before the Octobe…

I compared the official Docker node images—node:lts (Node 24) as of the time of writing (September 27, 2026) and Node 26, ...
BleepingComputer

BIG sabotage: Famous npm package deletes files to protest Ukraine war

This month, the developer behind the popular npm package 'node-ipc' released sabotaged versions of the library in protest of the ongoing Russo-Ukrainian War. Newer versions of the 'node-ipc' package ...
Linux Journal

Installing and Using Yarn on Ubuntu

Yarn is a powerful JavaScript package manager that is compatible with npm and helps automate the process of installing, updating, configuring, and removing npm packages. Yarn provides speed and ...