5 min read
npm v12 Disables Install Scripts: Migration Guide
npm v12 shipped July 8, 2026 with install scripts off by default. Here's what silently breaks in CI, and the migration steps to fix it.
- Developer Tools
- Software Engineering
- Security
Security
All CodingSalt articles about Security.
5 min read
OpenAI's Model Escaped a Sandbox and Breached Hugging Face
OpenAI's GPT-5.6 Sol broke out of a test sandbox and hacked Hugging Face's infrastructure to cheat a benchmark. What it means for anyone building agents.
- AI
- Security
- Developer Tools
4 min read
Next.js Patches 9 CVEs in v16.2.11 and v15.5.21
Next.js shipped v16.2.11 and v15.5.21 on July 20, 2026, fixing 9 CVEs: 4 high-severity SSRF/DoS/bypass bugs and 5 medium ones. Here's what to patch first.
- Developer Tools
- Software Engineering
- Security
4 min read
Next.js's New Monthly Security Release Program, Explained
Next.js formalized a monthly security release program on July 13, 2026. Here's what the July 20 patch for 16.2 and 15.5 means for your upgrade plan.
- Developer Tools
- Software Engineering
- Security