Tag: #nodejs
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 5 posts
The 3-Hour axios Account Takeover — Provenance Was On, and Nobody Checked It
At 00:21 UTC on March 31, 2026, a malicious version 1.14.1 landed on axios, a package with over 80 million weekly downloads. What makes this case interesting is that axios was already using npm trusted publishing — the l
2026-07-16 · 18 min read #security#supply-chain#npm#nodejs#devsecopsWhy npm supply-chain attacks won't go away — what npm-scan actually checks, and the defenses that work
npm supply-chain attacks are not isolated accidents but a recurring product of install scripts, transitive dependencies, and typosquatting. In 2025 the Shai-Hulud worm self-replicated through install scripts and harveste
2026-07-11 · 7 min read #npm#supply-chain#security#javascript#nodejsNode.js & Bun & Deno Backend Frameworks 2026 Complete Guide — Hono · Fastify · Express 5 · NestJS 11 · Elysia · tRPC · Encore TS · h3 · Effect Deep Dive
In 2026 the JavaScript backend ecosystem has left the single-runtime era behind. Node.js 22 LTS and the 24 stable channel, JSC-based Bun 1.2, security-first Deno 2, and Cloudflare Workers V8 isolates all run production s
2026-05-16 · 26 min read #nodejs#bun#deno#hono#fastifyNode.js Event Loop & libuv Internals — 6 Phases, Microtasks, Worker Threads, V8 Heap (2025)
The real answer to "Node.js is single-threaded, so why is it fast?" Dissecting libuvs 6 Event Loop phases (Timers, Pending Callbacks, Idle, Poll, Check, Close), process.nextTick vs Promise microtask priority, setImmediat
2026-04-15 · 11 min read #nodejs#libuv#event-loop#v8#asyncLinux I/O Evolution Deep Dive — blocking, select, poll, epoll, io_uring (2025)
How do you handle not 10,000 but 1,000,000 concurrent connections on a single server? 30 years of Linux I/O API evolution — from the 1970s blocking read, through the limits of select/poll, the epoll revolution, to iourin
2026-04-15 · 11 min read #linux#io#epoll#io-uring#async