Security firm Report URI says its threat intelligence tools have identified 15,579 compromised websites, collectively receiving an estimated 135 million visits a month. The infections include credit card skimmers, ClickFix malware traps, device-exploitation code and malicious redirects, introduced either through direct site compromises like WordPress flaws or via infected third-party scripts loaded by the sites.
scotthelme.co.uk
· 2026-11-06
A developer built a benchmark to measure how AI coding agents perform when instructed to build the same small Pokémon app using different JavaScript frameworks, such as Next.js, Nuxt and SvelteKit. The test compares outputs against a conformance suite to prevent cheating, measuring development time, token usage, lines of code, and resulting performance and accessibility.
nolanlawson.com
· 2026-11-01
An independent developer has published phoria2, a lightweight JavaScript library for building 3D charts, labelled scenes, dashboards and product viewers using WebGL 2. It is a rewrite of the author's earlier canvas-based phoria library, aiming for a simple API that can be learned quickly, and was shared on Show HN.
kevs3d.co.uk
· 2026-10-31
elect.horse is a daily puzzle game where players draw equal-sized voting districts on a hex grid to engineer a win for a horse candidate who is losing the popular vote to a cow, donkey and goat. The game runs in-browser and requires JavaScript to play.
elect.horse
· 2026-10-30
A developer has released an unofficial web port of Glider 4.0, the classic Macintosh game, playable directly in a browser via JavaScript. The project's source code has been published on GitHub, allowing others to inspect or build on the port.
dbohdan.github.io
· 2026-10-25
A developer has published Shitter, an open-source fork of the Nitter project that acts as a privacy-focused front-end for Twitter. It strips out JavaScript and ads, routes all requests through its own backend using Twitter's unofficial API, and is distributed as a multi-architecture Docker image. The project accepts contributions only via patch files submitted on issues rather than pull requests.
codeberg.org
· 2026-10-23
A technical write-up walks through why dynamic languages like Python, Ruby, and JavaScript often implement object attributes as hash tables, then details the performance costs of that approach. The piece argues that hashing, probing, and the extra memory indirection needed to reach a separate field-storage table make simple attribute lookups far slower than they should be.
bernsteinbear.com
· 2026-10-22
A developer showcased on Hacker News a tool that converts regular JavaScript—including regex matching, JSON parsing, and highlighting logic—into WebGPU kernels. The demo applies this approach to search across 100,000 JSON documents, running the workload in parallel on the GPU instead of the CPU.
chenglou.me
· 2026-10-20
A new web-based tool called lpviz offers an interactive visualizer for linear programming problems, running directly in a browser via JavaScript. Its accompanying documentation is accessible even without JavaScript enabled.
lpviz.net
· 2026-10-17
Tiny Little Office is a web-based office suite that encodes entire documents as shareable links rather than storing them on a server. It requires no accounts, saves nothing remotely unless a user chooses to keep a copy on their own device, and runs in the browser using JavaScript. The site also publishes an llms.txt file explaining how documents can be constructed as links and nested within one another using app-named fences.
tinylittleoffice.com
· 2026-10-14
A security researcher has revealed a technique to execute JavaScript functions without using traditional parentheses. The method involves manipulating the Error object's prepareStackTrace function and overriding array prototype methods to generate and invoke arbitrary code. This approach leverages prototype pollution and custom toString or valueOf functions to trigger execution.
blog.ikaes.de
· 2026-10-13
A developer with 20 years of experience, known for maintaining popular Ruby packages and writing programming books, says he has applied to more than three dozen jobs and received 24 rejections. Citing the toll of repeated rejection on his mental health, he says he is stepping away from the tech industry. He also notes that remote work from his home in Warrnambool, where he has worked for six years, appears incompatible with current hiring expectations.
ryanbigg.com
· 2026-10-13