JavaScript News: January 2026 ​

News ​

• Security
  • OWASP Top 10 Released
  • September 2025
    • Shai-Hulud 1.0 npm Worm
  • November 24, 2025
    • Shai-Hulud 2.0 npm Worm
  • December 3rd
    • React RSC CVE 10 RCE
      • React2Shell
  • December 9th
    • npm classic tokens revoked
      • npm security hardening initiative
  • December 11th
    • React RSC CVE 8 DOS
  • January 26th
    • React RSC CVE 7.5 DOS
• Node.js v25.2.0 - Type Stripping Now Stable
• ECMAScript | Iterator Sequencing now Stage 4
• Anthropic Acquires Bun
• WebGPU Now Supported Across All Major Browsers
• 2025 JavaScript Rising Stars
• Astro is Joining Cloudflare
• 2025 Web Almanac

Resources & Articles & More ​

• Stickered Laptop Gallery
• JavaScript Engine Zoo
• Six Things I Bet You Didn't Know You Could Do With Chrome's Devtools
• Brand New Layouts with CSS Subgrid
• React Conf 2025 Talks
• Anders Hejlsberg's Take on the Rise of TypeScript
• The Inner Workings of JavaScript Source Maps
• Beej's Guide to Learning Computer Science
• Monorepo vs Multi-repo vs Git submodule vs Git Subtree
• How the Web is Using JavaScript from Archive.org

Releases ​

• Storybook 10
  • ESM only!
• Angular v21
  • Signal based forms
  • Angular Aria - Accessible components
  • Angular MCP Server
  • vitest now default test runner
  • Zoneless change detection now the default (signals)
• Prisma ORM v7.0.0
  • Rust free prisma client now the default
• CedarJS Released - Full-stack React framework forked from the former RedwoodJS
• Deno 2.6
  • dx is the new npx
  • adds deno audit

Upcoming 2026 Conferences ​

• React Advanced Canada | Toronto, CA, March 24, 2026
• React Miami | Miami, FL, April 23-24, 2026
• Vue Conf US | Atlanta, GA, May 19-20, 2026
• CascadiaJS | Seattle, WA, June 1-2, 2026
• International JavaScript Conference | San Diego, CA June 1-4, 2026