Web Development: Vite 8.1 to accelerate large applications

Vite 8.1. The new release brings the experimental Bundled Dev Mode, which aims for performance improvements. Furthermore, the ...
The Hacker News

Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RAT

JFrog found malicious npm packages that deploy a Windows RAT to steal Chrome credentials, run commands, and transfer files.
latesthackingnews.com

CVE-2026-48907: How the Joomla JCE Exploit Works and What to Do About It

CVE-2026-48907 in the Joomla JCE plugin lets unauthenticated attackers drop PHP web shells with a single crafted request.
Microsoft

From package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet

A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend ...
Wall Street Journal

China Is Propping Up the World Economy by Importing a Lot Less Oil

A sharp fall in China’s crude oil imports during the Iran war has been instrumental in holding down oil prices and keeping the global economy humming. Clues are emerging in the mystery of the missing ...