NextBlock CMS, an open-source, AI-native CMS for Next.js 16 and Supabase, launched on Hacker News, claiming 100% Lighthouse performance and native AI-readiness. The open-core product is free under AGP…
Nx 23 introduces consumer and provider generators for micro frontends in a monorepo, enabling build fan-out, bundle decoupling, and reduced context cost for AI coding agents. The approach keeps one re…
On 26 August 2025, attackers published eight malicious versions of Nx, a build tool with millions of weekly downloads, to npm, which were live for five hours and twenty minutes. The malware exploited …
On August 26, 2025, malicious versions of the Nx build package, which draws roughly four million downloads a week, were published to npm with a post-install hook that executed a credential-stealing sc…
OneCLI, an Apache-2.0 open-source project, introduces a proxy-based architecture that keeps real API keys out of AI agent environments, preventing credential theft even if the agent is prompt-injected…
A developer created Claude Code skills to enforce safe dependency update practices for JavaScript and PHP projects, aiming to mitigate supply chain attacks. The skills require agents to research recen…
Aikido Intel, a real-time supply chain intelligence feed from Aikido, detected 19,500 malicious packages out of 7.5 million analyzed in Q2 2026, identifying most within 8 minutes of release. The feed …
Developer advocate Santosh Yadav argues that monorepos reduce code duplication and enable atomic changes across services, but warns that they require careful tooling and code review to avoid breaking …
A developer argues that modern JavaScript frameworks like Angular and React impose a token cost on large language models (LLMs) when generating code, making simpler, standards-based architectures more…
Polygraph, a meta-harness from the Nx team, launches to give AI agents cross-repo visibility and persistent session memory. It indexes all connected repositories into a graph, enabling agents to plan …
A new guide for cloud architects outlines practical steps to govern AI in the cloud, addressing the growing threat of shadow AI. The guide emphasizes discovery, data classification, and policy-as-code…
The article summarizes the state of monorepo tools in 2026, concluding that Turborepo has become the default for most JavaScript/TypeScript teams due to its simplicity and sensible defaults, while Nx …