Posts tagged with: NPM

WordPress 7.0, NPM Security, JavaScript - May 2026

Welcome to Hot Web Dev May 2026 featuring the latest in web development. This month we look at the new bumper update that is WordPress 7.0. We look at further attacks on package managers and how they are fighting back. Learning resources show you the hard parts of JavaScript and how to master them. The tool of the month is an animated freebie with no sign up required.

May 2026 - NPM + PyPI Supply Chain Attack: How to Delay Dependency Updates

On May 11th, 2026, a coordinated attack on the supply chain compromised over 170 npm packages and 2 PyPI packages. Given that millions of packages are downloaded daily from the NPM registry by both individuals and businesses, there are ways to protect your development environment from becoming a target. Surprisingly, not all package managers have this feature set by default. This handy guide will help you enable this feature in your development environment.