Node.js 25 正式发布：性能、安全与标准化全面升级

IT之家 10 月 16 日消息，当地时间 10 月 15 日， Node.js 团队发布了最新的 Node.js 25.0.0 正式版本。本次更新重点聚焦性能优化、安全模型强化以及与 Web 标准的进一步接轨。 Node.js 25 升级至 V8 ...

Web Development: Bun 1.3 Becomes Full-Stack JavaScript Runtime

The new version of Bun includes numerous innovations for full-stack development, as well as a client for Redis and its ...

Moderne Expands Modernization Platform With First Type-Attributed JavaScript & TypeScript ...

Moderne, the enterprise code modernization platform from the team behind OpenRewrite, today announced full JavaScript and ...
腾讯网

Happy DOM曝CVSS 9.4严重RCE漏洞，PoC已公开（CVE-2025-61927）

流行的JavaScript包Happy DOM曝出严重安全漏洞，该漏洞可使攻击者逃逸Node.js虚拟机（VM）上下文并在主机系统上执行任意代码。该漏洞被追踪为CVE-2025-61927，CVSSv4评分为9.4。

Moderne adds support for JavaScript and TypeScript to its code refactoring tool

Moderne, a company that provides solutions to help modernize code, announced that its Lossless Semantic Tree (LST) code model ...

Higher travel, new fees for bags lift Southwest Airlines earnings

Southwest Airlines — the dominant carrier at Nashville International Airport — reported its third quarter earnings Oct. 22, ...
腾讯网

Bun 1.3版本整合JavaScript工具链引发开发者争议

A：Bun 1.3版本新增了支持热重载的全栈开发服务器、支持PostgreSQL/MySQL/SQLite的SQL API、Redis支持、增强路由、跨平台编译、安全扫描器API以及隔离安装功能，还优化了垃圾收集器，实现了空闲CPU时间减少100倍。
The Hacker News

North Korean Hackers Combine BeaverTail and OtterCookie into Advanced JS Malware

The North Korean threat actor linked to the Contagious Interview campaign has been observed merging some of the functionality ...

North Korea Weaponizes Blockchain for Stealth Hacks, Poses as Job Recruiters

North Korean threat group Famous Chollima is using blockchain technology to hide malware payloads in smart contracts, which ...

British Airways will fly even larger plane on London nonstop

Seven years ago, British Airways began flying between Nashville and London — restoring the kind of nonstop European service ...
The Hacker News

npm, PyPI, and RubyGems Packages Found Sending Developer Data to Discord Channels

Researchers expose Discord webhook C2 in npm, PyPI, RubyGems; North Korean actors published 338 malicious npm packages with ...

Bun 1.3：JavaScript工具链整合再推进，开发者争议与未来展望

Bun 1.3版本的发布，无疑在 Java 生态圈内掀起了一波讨论热潮。作为一款由 Zig 编写，基于 JavaCore 引擎的 Java 运行时和工具包， Bun 致力于将原本分散的 Java 工具链整合为单一解决方案，以提供高性能、 Node.js 兼容性以及一体化的开发者支持。此次更新，更是将这一目标推向了新的高度，但也引发了部分开发者的担忧。