Spearphishing OSS Maintainers, EmDash is a Wordpress Replacement, and ECMA Fools Day | News | Ep 62

News for the week of March 30, 2026: fun with UUIDs, Cloudflare gunning for Wordpress, and how OSS maintainers can defend against spearphishing attacks. From the community: a very Solid 6 hours, compiling TS to native UI code, and a super fast VIN decoder.

Sponsored by Excalibur.js
Excalibur.js is the free and open source friendly TypeScript 2D game engine for the web. Learn to make web games with TypeScript or JavaScript! Excalibur comes out-of-the-box with everything you need, like physics, sprites, animations, sound effects, and first-party plugins for popular 2D gamedev tools.

• Homepage and Docs: https://excaliburjs.com
• Make Your First Game in 10 Minutes
• Join the Discord: https://discord.gg/9UemP985Uy

Chapters

• (00:00) - Welcome to the Show
• (05:01) - News: ECMA Fools Day
• (07:22) - News: Cloudflare's EmDash Wants to Replace WordPress
• (11:56) - News: Attackers Are Spear-phishing High Profile OSS Maintainers
• (20:31) - News: BabylonJS v9, a 3D TypeScript Game Engine
• (21:38) - News: Claude Code CLI Source Code Leaked
• (24:00) - Library Watch: LayoutSans, Pure TypeScript 2D Layout Engine
• (25:29) - Library Watch: PerryTS Compiles TS to Native UI on Any Platform
• (28:55) - Library Watch: Gagen, Generating GitHub Actions with TypeScript
• (30:48) - Library Watch: finprim, Type-safe Financial Primitives
• (32:27) - Library Watch: GameDevLibrary, Excalibur.js Demos and Snippets
• (34:14) - Highlight: How Vercel Made Turborepo 96% Faster
• (37:16) - Highlight: oxlint and oxfmt Framework Compatibility Matrix
• (37:46) - Highlight: Jake Archibald Highlights Proposed HTML-in-Canvas Feature
• (38:49) - Highlight: Boston TS Club is Back
• (39:17) - Highlight: Solid 2.0 with Ryan Carniato
• (40:18) - Highlight: Cardog's Super Fast VIN Decoder in Corgi V3
• (41:32) - Highlight: Fireship's Explainer on What Pretext Does
• (43:48) - Bleets of the Week
• (44:46) - Secret of the Handbook: Assertion Functions
• (46:50) - Cool Link: neovim 0.12
• (48:07) - Cool Watch: Hands-on with Artemis II
• (49:14) - Cool Watch: Floating Point Math is Really Hard
• (50:27) - Cool Read: Project Hail Mary
• (52:39) - The Minnesota Long Goodbye

News

• ECMA Fools Day
• Every UUID Dot Com
• Hot Guids in your area
• Cloudflare: Announcing EmDash, Wordpress in TypeScript
• Socket: Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
• BabylonJS v9 released
• Anthropic: Claude Code Source Code Leaked and Rewritten in Python

Library Watch

• LayoutSans: Pure TypeScript 2D layout engine powered by Pretext
• PerryTS: Compile TypeScript to native UI on any platform (React Native, .NET MAUI alternative)
• Gagen: GH actions in TypeScript
• FinPrim: Financial Primitives in TypeScript
• GameDevLib: Excalibur.js demos and snippets

From the Community

• Vercel: Making Turborepo 96% faster
• VoidZero: Oxlint Oxfmt support compatibility matrix
• Jake Archibald: HTML-in-Canvas demos
• Boston TS meetup is back!
• Ryan Carniato: 6 hours of Solid 2.0 talk
• Cardog: Binary Indexes and What a Tiny LL M Learned About VINs
• Fireship: He just crawled through hell to fix the browser…
• Bleets of the week: Jokes on them and what types for plastic BBQ set?
• Secret of the Handbook: TypeScript assertion functions

Cool Links

• Neovim 0.12
• Floating point math is hard. Really, really hard.
• Hands On with the Artemis II Trajectory
• Project Hail Mary (audiobook)

Music
Seahorse Dreams by Kubbi (Spotify)