‼️ Malware in prominente Javanoscript-Projekte eingeschleust!

In recent days, a large-scale supply chain attack on the npm ecosystem has been detected. Attackers have compromised several popular JavaScript packages and infected them with malicious code. The aim is to steal sensitive information such as access data, tokens and other confidential information from development environments.
The affected packages are frequently used dependencies that are used in many projects. This allows malicious code to end up in build pipelines, test environments or even in our production systems without being noticed.

- https://socket.dev/blog/npm-is-package-hijacked-in-expanding-supply-chain-attack

Malicious Packages and Versions:
👉🏻 eslint‑config‑prettier (8.10.1, 9.1.1, 10.1.6, 10.1.7)
👉🏻 eslint‑plugin‑prettier (4.2.2, 4.2.3)
👉🏻 synckit (0.11.9)
👉🏻 @pkgr/core (0.2.8)
👉🏻 napi‑postinstall (0.3.1)
👉🏻 got-fetch (5.1.11, 5.1.12)
👉🏻 is (3.3.1, 5.0.0)

#security

Hey Devs!

I'm not against using AI/KI in the projects... But... Please... Fix the comments before pusing and creating pool/merge request ^_^

This is not the first place where I read such messages in the code-base. 😅

If I see nonhuman messages 🤖 I will see a jira-issue too! where we need to plan and fix the problem... otherwise please remove or rewrite!


#ai

banned 😂

#ai

The Angular team merged the MP, announcing the transition to Rolldown instead of Rollup, which will optimize the work of the collector and will be a plus when loading the application, since fewer chunks will need to be loaded.

At the same time, the feature is currently in the experimental status and is under the flag, accordingly, it will not be used by default for all projects.

#angular

Do I need a labubu 😂?

Hey! it's Monday!

And we need to start somehow with coding... But for this we need a good music...

Let's try with this incredible group: https://www.youtube.com/watch?v=nihFu0YjkcE&list=RDnihFu0YjkcE&start_radio=1&ab_channel=Bloodywood

"Tadka" (तड़का in Hindi) refers to a technique used to enhance the flavor of certain curries. It’s a sort of embellishment to the dish, tempering of spices/herbs in technical terms. It involves adding spices or herbs to a teaspoon of butter/ghee/oil and then incorporating it at the very end of the cooking process. This method not only enhances the flavor but also imparts a smoky, earthy essence to the dish.

Already 138 Angular packages tracked with this new tool to understand which library version is compatible with your #angular projects.

There are still a lot on the roadmap towards a public version:

- add more packages (at least 200)
- sanitize their data
- get to know if they are archived
- a feature to audit your dependencies directly
- a npm package to update your dependencies
- a mcp server to bring the experience to a new level!



Like? Wait a bit... Gérôme still on final review...

‼️ ATTENTION!

FINALLY 😆 nestjs-zod@5 support zod@4!

Now you can migrate!!!

PS: a lot of breaking changes, but easy to fix! 😉

Good luck!

https://github.com/BenLorantfy/nestjs-zod/releases/tag/v5.0.0

FYI 🔜 NG@20.2.0

📌 support alias as in else if (https://github.com/angular/angular/pull/63047)

@if (template) {
  template 1
} @else if (loaderTemplate(); as state) {
  <skeleton [loading]="state.loading"> 
}

📌 lastSuccessfulNavigation from Router API will be a signal.

// 20.1
const navigation = this.router.lastSuccessfulNavigation;
// 20.2
const navigation = this.router.lastSuccessfulNavigation();

📌 infer type of event target for void elements (https://github.com/angular/angular/pull/62648)

https://github.com/angular/angular/releases/tag/20.2.0


DONE!

NeuralOS: a generative OS entirely powered by neural networks

NeuralOS, probably the world's most expensive operating system, running at a blazing 1.8fps on an NVIDIA H100 GPU. 😅

What exactly is NeuralOS?

It's an experimental generative OS that predicts every screen frame entirely from your mouse and keyboard inputs. No internet, no traditional software stack, purely hallucinated pixels.

How does it work?

- An RNN tracks the computer state (kind of like a traditional OS kernel, but all neural and continuous).
- A diffusion model generates the actual screen images (imagine a desktop environment, but fully neural-rendered).

The GIF shows a funny demo: NeuralOS running NeuralOS inside itself. Every single pixel you're seeing is model-generated, no network involved at all!

Long-term, our goal is to remove boundaries between software entirely and make OS fully customizable beyond fixed menus and options. Imagine asking your OS something like:

- "Merge all my messaging apps into one interface."
- "Make Signal look like Messenger."
- "Turn the movie I'm watching into a playable video game."

I'm curious about your thoughts:

Could future OS interfaces just become human-like avatars (think Grok's Ani)? Are menus and app-specific UIs going away?

What about fully generative games: could diffusion-based games eventually replace traditional ones?

Try the live demo here: neural-os.com (you might need patience…)