New Shai-Hulud worm spreading through npm, GitHub

A new version of the Shai-Hulud credentials-stealing self-propagating worm is expanding through the open npm registry, a threat that developers who download packages from the repository have to deal with immediately. Researchers at Wiz Inc. said Monday that in the...

Angular v21 debuts Signal Forms, stabilizes MCP server

Google’s Angular team has released Angular v21, the latest version of Google’s TypeScript-based web framework. This update introduces experimental Signal Forms, a reactive forms experience built on the Signals application state tracker, and launches a developer...