Dark Reading’s Post

A craziest supply chain attack so far in 2024. 😳 YT videos | https://lnkd.in/eX4Rdi5B News| https://lnkd.in/ejJ4Gbb2 Here is another writeup about exploiting V8 engine in a CTF (https://lnkd.in/e8bPUq8U). As a former frontend engineer, it's very often to install and use libraries without checking the source. However, this "polifill.io", the domain & GitHub account were purchased by another company earlier, then they modified the content to deliver malicious scripts. It's necessary to have a reliable source for developers to use safely...

Bredec Group Bredec Group Ask HN: How do you use React as a library in 2024?: Hi all, With most of the current trend being to use React as a framework (e.g. NextJS), is there anyone here who still uses React as a library? If so, how is your setup? I'm asking this is because I want to go back to MVC, but I don't want to miss out on the nice libraries out there built for React. Hence I want to combine MVC + React as a library. --- Comments URL: https://lnkd.in/d8vXqQir Points: 1 # Comments: 0 info@bredec.com Inquiry@bredec.com

JSR, the Deno team's new package registry, is a new attempt to address some long-standing issues with npm, with a different approach to package security and first-class #TypeScript support. While it's still early days, the #JavaScript community is discussing the potential impact of adding a new registry. Here's everything we know about JSR so far: https://lnkd.in/eCDHi5KT

I've been wary of JavaScript injection risks. Recently, I delved into JS obfuscation tool (https://obfuscator.io) to shield my code from unauthorized access. Impressed by features like debug protection, which prevents reverse engineering, I found peace of mind in safeguarding my work. #JavaScript #CodeProtection #Obfuscation #Security #obfuscator.io

JavaScript for hackers: Learn to think like a hacker https://lnkd.in/gWDdb8qx by Gareth Heyes is the featured book on the Leanpub homepage! https://leanpub.com cc @garethheyes #Javascript #ComputerSecurity #ComputerProgramming

I just updated this course section on Frontend Hire to add a crucial callout about security in Next.js applications. It can be a severe security issue for static generated content but for most of the general applications not a big issue. Note: This is a pro course! Course Link: https://lnkd.in/gMuy8GnE

Discover how threat actors are exploiting jQuery in a complex supply chain attack, targeting npm, GitHub, and jsDelivr. Learn about the risks and impl

📣 Update Alert: Bun v1.0.2 is Live! 🐰 Hello LinkedIn Network, I'm excited to share that Bun v1.0.2 is now available! 🌟 This update brings: 🐛 Bug fixes to enhance stability. 🏎️ Faster 'bun --watch' for improved efficiency. 📦 All-in-one JavaScript magic. Explore the improvements here: https://lnkd.in/gzFW7Tk2 Stay tuned for more updates. Happy coding! 🚀 #bun #bunjs #javascript #development #update #technews #bunupdates

📣🎉 Excited to share my latest coding adventure with you all! I just wrote a JavaScript function to reverse a string, and I had a blast doing it! 🚀 Here's the code: (JavaScript) function reverseString(s) {   try {     console.log(s.split('').reverse().join(''));   } catch (error) {     console.log(error.message);     console.log(s);   } } This function takes a string as input and prints the reversed string to the console. If the input is not a string, it catches the error and prints a helpful message. I had a lot of fun playing around with different ways to reverse a string, and I learned a ton about error handling in JavaScript. Give it a try and let me know what you think! 🤓💻 #JavaScript #coding #programming #tech #developer #fun #emojis #excited #errorhandling #reversestring

"In this talk, I will cover the fundamentals of JavaScript security and provide actionable insights and best practices for safeguarding web applications built with modern frameworks like React, Vue and Angular! In addition to that, I will be sharing the methodology that we've applied to secure GitLab codebase, increasing our frontend security posture, and sharing the real-world experiences and lessons learned. Attendees will leave with a better understanding of how to stay ahead of the game when it comes to JavaScript security, and with practical steps they can take to enhance their own security practices." https://lnkd.in/e8XS2gsD