Upcoming Breaking Changes for NPM v12
Hacker News (AI keywords)5 days agoReleaseGitHub's official changelog published a heads-up about breaking changes coming in NPM v12, targeting JavaScript and Node.js developers. Major version upgrades typically drop deprecated APIs, raise minimum Node.js version requirements, and alter lockfile formats or dependency resolution logic. Developers maintaining packages or CI pipelines should review the changes early to avoid disruption upon upgrading.
Axios 套件安全入侵事件：Vercel 發布緊急修復與防範指引★ 85
Vercel Changelog75 days agoIncident### Incident Overview On March 31, 2026, Vercel issued an emergency security advisory warning that **Axios**, a widely-used JavaScript HTTP client library, had…
Vercel 推出全新 npm 套件：自動修復與補全損壞的串流 Markdown (Streaming Markdown)★ 75
Vercel Changelog193 days agoNew ToolWhen developing AI chat applications based on large language models (LLMs), developers frequently encounter the problem of "streaming Markdown rendering…
Vercel 發布安全警示：應對 Shai-Hulud 2.0 供應鏈攻擊威脅★ 75
Vercel Changelog202 days agoIncidentVercel has officially published a security advisory regarding the "Shai-Hulud 2.0 Supply Chain Compromise." "Shai-Hulud" refers to malicious supply chain…
Vercel 因應「Shai-Halud」軟體供應鏈攻擊擴大影響之防護與應對聲明★ 75
Vercel Changelog271 days agoIncidentThis announcement is Vercel's official response and security guidance regarding the expanded impact of a software supply chain attack campaign known as…
Vercel 針對 2025 年 9 月 8 日重大 npm 供應鏈攻擊之應對聲明★ 85
Vercel Changelog279 days agoIncidentCloud deployment platform Vercel published an official statement on September 8, 2025, issuing emergency response measures in reaction to a major npm supply…
s1ngularity：Nx 套件遭遇供應鏈攻擊，Vercel 發布安全警示★ 75
Vercel Changelog291 days agoIncidentVercel issued an urgent security advisory on August 27, 2025, indicating that the package ecosystem of Nx — the popular JavaScript/TypeScript Monorepo build…