--- title: 'Beautiful Grav 2.0, IDE Plugin Security - June 2026' url: 'https://www.worldoweb.co.uk/2026/beautiful-grav-20-ide-plugin-security-june-2026' markdown: 'https://www.worldoweb.co.uk/2026/beautiful-grav-20-ide-plugin-security-june-2026.md' date: '2026-07-01' description: 'June 2026 Hot Web Dev: Grav 2.0, JetBrains plugins security issue, learning the command line and another way to build desktop apps.' taxonomy: category: - 'Web Development' tag: - Tools - News - Learning - Magazine - Security - Grav - Plugins --- # Beautiful Grav 2.0, IDE Plugin Security - June 2026 Published on July 1, 2026 by Tracy Ridge in [Web Development](https://www.worldoweb.co.uk/category/category:Web%20Development) Welcome to Hot Web Dev June 2026 featuring the latest in web development. This month, we welcome the new major release of GravCMS and check out the new features that make it a suitable alternative to WordPress. There have been a few security issues with NPM over the previous few editions. Now we need to watch out for rogue code editor plugins. The tool of the month is an Electron alternative. Table of contents: 1. [Grav 2.0 Released](#one) 2. [JetBrains Plugin Security Issues](#two) 3. [Learning Resources](#three) 4. [WOW Tool Of The Month](#four) 5. [Must-Read Resources From June 2026](#five) ## Grav 2.0 Released I have promoted Grav since switching to it in [March 2026](https://www.worldoweb.co.uk/2026/17-years-with-wordpress-one-flat-file-leap-my-gravcms-migration). One thing that drew me to Grav was the speed; compared to WordPress, it is blazingly fast. Recently, I have been following the development of Grav’s new version, along with its brand new admin interface. Admin Next is a new, single-page application admin for Grav 2.0, built with SvelteKit 5 and powered by the Grav API plugin. It replaces the server-rendered Admin Classic, offering a modern, fast, and responsive interface with a clean-slate architecture for easier plugin extension. The new admin features a fixed layout with a sidebar, topbar, and a single scrolling content area. The dashboard in Admin is a customisable, multi-widget grid that users can rearrange. Super-admins can lock down the layout for a consistent experience. Widgets are responsive, with a 4-column layout and horizontal sizing, and plugins can contribute their own widgets. ![GravCMS-2.0.webp](https://www.worldoweb.co.uk/user/media/GravCMS-2.0.webp)*GetGrav Website* The included migrate plugin assists with switching to the new version. Unfortunately, I tried several times to migrate, each time receiving server response errors, even after upgrading to 5.04. I checked file permissions and ensured that all the plugins and my own custom theme were compatible. My solution was to stage a new install with Hostinger and copy the contents of the user folder across. There are still a few discrepancies that I will fix over time. One welcome addition is the media module, which makes managing all of your media files a breeze. Consumers of AI will appreciate the Grav MCP server. Grav’s automation surface allows developers to scaffold sites, test themes, and drive content workflows. Agencies can scale workflows and content standards across multiple Grav sites, freeing up time for more complex tasks. For a full rundown of all the new features Grav has to offer. Visit their [blog](https://getgrav.org/blog). ## JetBrains Plugin Security Issues A coordinated malware campaign on the JetBrains Marketplace targeted at least 15 IDE plugins, stealing AI provider API keys from nearly 70,000 installations. The plugins, masquerading as AI coding assistants, exfiltrated API keys to a server controlled by the attacker, potentially reselling them or using them for their own purposes. This highlights the vulnerability of IDE plugin ecosystems and the importance of caution when installing plugins and handling sensitive information. Editor plugin ecosystems, such as JetBrains, are vulnerable to supply chain attacks due to their access to sensitive information and unsandboxed execution. Developers should exercise caution when using plugins and treat them like dependencies, being wary of potential security risks. **Source**[Aikido](https://www.aikido.dev/blog/multiple-jetbrains-ide-plugins-caught-stealing-ai-keys) ## Learning Resources NestJS provides structure for large teams, unlike Express. This [video](https://www.youtube.com/watch?v=Q6NpiIp-6WM%0A%3Frel%3Dnofollow) builds a Hackathon API with Prisma, Better Auth, and Arcjet, showcasing the NestJS execution pipeline. This [Command Line Basics for Beginners course](https://youtu.be/mABpAI-pCw0?si=yFM8WyfaQih0zN0w%3Frel%3Dnofollow) was released on the freeCodeCamp.org YouTube channel. Learn to boost efficiency, unlock advanced tools, and prepare for the industry. ## WOW Tool of the Month If you are looking to build desktop web apps, you can go with Electron, Tauri and Electrobun. [Deno Desktop](https://docs.deno.com/runtime/desktop/) is a cross-platform alternative that converts Deno projects into self-contained desktop applications, bundling code, runtime, and rendering engine. Deno Desktop offers a small, Node-compatible solution for building desktop apps with web stacks. It provides framework auto-detection, in-process bindings, cross-compilation, and built-in auto-update capabilities. Deno Desktop is ideal for JavaScript/TypeScript codebases, consistent rendering across platforms, and leveraging existing web app code. ## Must-Read Resources From June 2026 - [What I Learned Implementing the Same Program in Seven Languages](https://matthewsetter.com/blog/item/implement-same-app-in-seven-languages) - [2026 Logo Trends Report: 15 Logo Design Trends Shaping Branding This Year](https://justcreative.com/logo-design-trends-2026/) - [20 Years of Blogging](https://remysharp.com/2026/06/17/20-years-of-blogging) - [Is Cybersecurity Hard? Honest Career Guide for 2026](https://www.smashingapps.com/is-cybersecurity-hard/) - [The Hidden Security Risk in Modern Networks: The Work Between Tools](https://thehackernews.com/2026/06/the-hidden-security-risk-in-modern.html) ### Share [X](https://x.com/intent/tweet?text=Beautiful%20Grav%202.0%2C%20IDE%20Plugin%20Security%20-%20June%202026&url=https%3A%2F%2Fwww.worldoweb.co.uk%2F2026%2Fbeautiful-grav-20-ide-plugin-security-june-2026&via=worldoweb "Share on X") [Facebook](https://www.facebook.com/sharer.php?u=https%3A%2F%2Fwww.worldoweb.co.uk%2F2026%2Fbeautiful-grav-20-ide-plugin-security-june-2026 "Share on Facebook") [Reddit](https://www.reddit.com/submit?url=https%3A%2F%2Fwww.worldoweb.co.uk%2F2026%2Fbeautiful-grav-20-ide-plugin-security-june-2026&title=Beautiful%20Grav%202.0%2C%20IDE%20Plugin%20Security%20-%20June%202026 "Share on Reddit") [LinkedIn](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.worldoweb.co.uk%2F2026%2Fbeautiful-grav-20-ide-plugin-security-june-2026 "Share on LinkedIn") [Bluesky](https://bsky.app/intent/compose?text=Beautiful%20Grav%202.0%2C%20IDE%20Plugin%20Security%20-%20June%202026%20https%3A%2F%2Fwww.worldoweb.co.uk%2F2026%2Fbeautiful-grav-20-ide-plugin-security-june-2026 "Share on Bluesky") [Email](mailto:?subject=Beautiful%20Grav%202.0%2C%20IDE%20Plugin%20Security%20-%20June%202026&body=https%3A%2F%2Fwww.worldoweb.co.uk%2F2026%2Fbeautiful-grav-20-ide-plugin-security-june-2026 "Share via email") #### Tags [ Tools](https://www.worldoweb.co.uk/tag/tag:Tools) [ News](https://www.worldoweb.co.uk/tag/tag:News) [ Learning](https://www.worldoweb.co.uk/tag/tag:Learning) [ Magazine](https://www.worldoweb.co.uk/tag/tag:Magazine) [ Security](https://www.worldoweb.co.uk/tag/tag:Security) [ Grav](https://www.worldoweb.co.uk/tag/tag:Grav) [ Plugins](https://www.worldoweb.co.uk/tag/tag:Plugins) ##### Next [ ← WordPress Shell Woes, WOW Updates - July 2026 ](https://www.worldoweb.co.uk/2026/wordpress-shell-woes-wow-updates-july-2026) OR ##### Previous [ WordPress 7.0, NPM Security, JavaScript - May 2026 → ](https://www.worldoweb.co.uk/2026/wordpress-7-0-npm-security-javascript-may-2026) --- ## Navigation - Previous: [WordPress Shell Woes, WOW Updates - July 2026](https://www.worldoweb.co.uk/2026/wordpress-shell-woes-wow-updates-july-2026.md) - Next: [WordPress 7.0, NPM Security, JavaScript - May 2026](https://www.worldoweb.co.uk/2026/wordpress-7-0-npm-security-javascript-may-2026.md)