JavaScript News: August 2026 ​

News ​

• Stripe Buys OpenRouter for $7B+
• Cloudflare Wallets for the Agentic Internet
• OpenAI Agent Allegedly Hacks Hugging Face
• AI Assistant Hacks Gym Website
• Anthropic to pay $1.5B over book piracy
• Supply Chain Attack Hits keyv and cacheable
• GitHub Tightens npm 2FA Token Rules
  • GitHub Adds npm Malware Scanning
• GitHub public preview: Stacked pull requests
• React Compiler Ported to Rust
• Vercel Adds Agent Plugins Spec
• Next.js Security Release Planned for Aug 26

Resources & Articles ​

• npm’s 2FA Token Change Explained
• Reactivity + Rendering Benchmark

Releases ​

• Node.js 26.7.0
• Next.js 16.3
• Astro 7.2
• SvelteKit 3 Release Candidate
• Vue 3.6 RC.2
• React Router 8.1
• Bun 1.4
• TanStack Charts (First Look)

Upcoming 2026/2027 Conferences ​

• DotJS Paris | Paris, France, September 18, 2026
• UtahJS | Sandy, UT, September 18, 2026
• WeAreDevelopers World Congress (North America) | San José, CA, September 23 - 25, 2026 — CFP closed (late submissions still reviewed on a rolling basis)
• International JavaScript Conference NYC | Brooklyn, NY & Online, September 28 - October 2, 2026
• NodeConf EU | Bologna, Italy, September 29 - 30, 2026 — CFP open until September 1, 2026
• AI Coding Summit New York Edition | Jersey City, NJ & Online, November 16 - 17 & 19, 2026
• JSNation US | Jersey City, NJ & Online, November 16 & 19, 2026
• React Summit US | Jersey City, NJ & Online, November 17 & 20, 2026
• React Day Berlin | Berlin, Germany & Online, December 4, 2026
• Web Rebels | Oslo, Norway, May 25 - 26, 2027 — CFP open until September 19, 2026