What the * week….

R.I.P Hulk!!! 😭😭😢😭😭

‼️ Malware in prominente Javanoscript-Projekte eingeschleust!

In recent days, a large-scale supply chain attack on the npm ecosystem has been detected. Attackers have compromised several popular JavaScript packages and infected them with malicious code. The aim is to steal sensitive information such as access data, tokens and other confidential information from development environments.
The affected packages are frequently used dependencies that are used in many projects. This allows malicious code to end up in build pipelines, test environments or even in our production systems without being noticed.

- https://socket.dev/blog/npm-is-package-hijacked-in-expanding-supply-chain-attack

Malicious Packages and Versions:
👉🏻 eslint‑config‑prettier (8.10.1, 9.1.1, 10.1.6, 10.1.7)
👉🏻 eslint‑plugin‑prettier (4.2.2, 4.2.3)
👉🏻 synckit (0.11.9)
👉🏻 @pkgr/core (0.2.8)
👉🏻 napi‑postinstall (0.3.1)
👉🏻 got-fetch (5.1.11, 5.1.12)
👉🏻 is (3.3.1, 5.0.0)

#security

Hey Devs!

I'm not against using AI/KI in the projects... But... Please... Fix the comments before pusing and creating pool/merge request ^_^

This is not the first place where I read such messages in the code-base. 😅

If I see nonhuman messages 🤖 I will see a jira-issue too! where we need to plan and fix the problem... otherwise please remove or rewrite!


#ai

banned 😂

#ai

The Angular team merged the MP, announcing the transition to Rolldown instead of Rollup, which will optimize the work of the collector and will be a plus when loading the application, since fewer chunks will need to be loaded.

At the same time, the feature is currently in the experimental status and is under the flag, accordingly, it will not be used by default for all projects.

#angular

Do I need a labubu 😂?

Hey! it's Monday!

And we need to start somehow with coding... But for this we need a good music...

Let's try with this incredible group: https://www.youtube.com/watch?v=nihFu0YjkcE&list=RDnihFu0YjkcE&start_radio=1&ab_channel=Bloodywood

"Tadka" (तड़का in Hindi) refers to a technique used to enhance the flavor of certain curries. It’s a sort of embellishment to the dish, tempering of spices/herbs in technical terms. It involves adding spices or herbs to a teaspoon of butter/ghee/oil and then incorporating it at the very end of the cooking process. This method not only enhances the flavor but also imparts a smoky, earthy essence to the dish.

Already 138 Angular packages tracked with this new tool to understand which library version is compatible with your #angular projects.

There are still a lot on the roadmap towards a public version:

- add more packages (at least 200)
- sanitize their data
- get to know if they are archived
- a feature to audit your dependencies directly
- a npm package to update your dependencies
- a mcp server to bring the experience to a new level!



Like? Wait a bit... Gérôme still on final review...

‼️ ATTENTION!

FINALLY 😆 nestjs-zod@5 support zod@4!

Now you can migrate!!!

PS: a lot of breaking changes, but easy to fix! 😉

Good luck!

https://github.com/BenLorantfy/nestjs-zod/releases/tag/v5.0.0

FYI 🔜 NG@20.2.0

📌 support alias as in else if (https://github.com/angular/angular/pull/63047)

@if (template) {
  template 1
} @else if (loaderTemplate(); as state) {
  <skeleton [loading]="state.loading"> 
}

📌 lastSuccessfulNavigation from Router API will be a signal.

// 20.1
const navigation = this.router.lastSuccessfulNavigation;
// 20.2
const navigation = this.router.lastSuccessfulNavigation();

📌 infer type of event target for void elements (https://github.com/angular/angular/pull/62648)

https://github.com/angular/angular/releases/tag/20.2.0


DONE!