lessnews.dev

lessnews.dev

newsfeed for busy web developers
GitHub Stacked PRs

https://github.github.com/gh-stack/

885
509
Someone bought 30 WordPress plugins and planted a backdoor in all of them

https://anchor.host/someone-bought-30-wordpress-plugins-and-planted-a-backdoor-in-all-of-them/

1176
329
Building a CLI for all of Cloudflare

https://blog.cloudflare.com/cf-cli-local-explorer/

328
107
Why AI Sucks at Front End

https://nerdy.dev/why-ai-sucks-at-front-end

119
161
The End of Eleventy

https://brennan.day/the-end-of-eleventy/

223
185
Under the hood of MDN's new front end

https://developer.mozilla.org/en-US/blog/mdn-front-end-deep-dive/

10
0
Installing every* Firefox extension

https://jack.cab/blog/every-firefox-extension

667
80
You're Looking at the Wrong Pretext Demo

https://denodell.com/blog/youre-looking-at-the-wrong-pretext-demo

15
0
Bun v1.3.12

https://bun.com/blog/bun-v1.3.12

20
4
Building a JavaScript runtime in one month

https://themackabu.dev/blog/js-in-one-month

16
7
Git commands I run before reading any code

https://piechowski.io/post/git-commands-before-reading-code/

2248
477
JSIR: A High-Level IR for JavaScript

https://discourse.llvm.org/t/rfc-jsir-a-high-level-ir-for-javascript/90456

83
32
You can't cancel a JavaScript promise (except sometimes you can)

https://www.inngest.com/blog/hanging-promises-for-control-flow

95
61
Dear Heroku: Uhh What's Going On?

https://judoscale.com/blog/heroku-whats-going-on

107
45
Signals, the push-pull based algorithm

https://willybrauner.com/journal/signal-the-push-pull-based-algorithm

41
11
The Axios supply chain attack used individually targeted social engineering

https://simonwillison.net/2026/Apr/3/supply-chain-social-engineering/

46
11
EmDash Feedback

https://ma.tt/2026/04/emdash-feedback/

40
6
Post Mortem: axios NPM supply chain compromise

https://github.com/axios/axios/issues/10636

276
132
Node.js Security Bug Bounty Program Paused

https://nodejs.org/en/blog/announcements/discontinuing-security-bug-bounties

16
1
Email obfuscation: What works in 2026?

https://spencermortensen.com/articles/email-obfuscation/

363
100
I Decompiled the White House's New App

https://blog.thereallo.dev/blog/decompiling-the-white-house-app

14
2
The Claude Code Source Leak: fake tools, frustration regexes, undercover mode

https://alex000kim.com/posts/2026-03-31-claude-code-source-leak/

1352
558
Axios compromised on NPM – Malicious versions drop remote access trojan

https://www.stepsecurity.io/blog/axios-compromised-on-npm-malicious-versions-drop-remote-access-trojan

1911
790
← PreviousPage 6 of 17Next →