javascript

(2 articles)

May 23, 2026

npm 2FA Publishing Controls Block Supply Chain Attacks

npm now gates package publishing behind 2FA and adds install controls. Here's what developers need to configure to protect their supply chain.

April 3, 2026

LinkedIn Secretly Scans for 6,000+ Chrome Extensions, Collects Device Data

LinkedIn injects hidden JavaScript to detect 6,236+ Chrome extensions and harvest device data from visitors - what developers need to know about browser fingerprinting.