JavaScript News: May 2026 ​

News ​

• TanStack npm Packages Compromised via "Mini Shai-Hulud" Supply Chain Attack
• North Korean Group Published 60+ Malicious npm Packages Designed to Fool AI Coding Agents (PromptMink)
• RFC: Make npm Install Scripts Opt-In
• The HTML Sanitizer API

Resources & Articles & More ​

• How LLMs Work Under the Hood — Explained with Runnable JavaScript
• Crossword of JS Espression (NOT easy)

Releases ​

• Node.js 26.0.0
• pnpm 11.0
• Rspack 2.0
• Kysely 0.29
• MikroORM 7.1

Upcoming 2026 Conferences ​

• Denver Dev Day | Lakewood, CO (Red Rocks Community College), June 26, 2026
• CascadiaJS | Seattle, WA, June 1-2, 2026
• International JavaScript Conference | San Diego, CA June 1-4, 2026
• DotJS Paris | Paris, FR, September 18, 2026
• UtahJS | SLC, UT, September 18, 2026