Sascha Becker
Senior Fullstack Javascript Developer with a focus on continuous learning, pleasant user experience, high developer experience, scalable architectures and performant web applications.
What changes in a React app when you stop treating it like a webpage and start treating it like a desktop environment: windows, a dock, a shared 3D canvas.
On May 6, 2026, React and Next.js patched twelve vulnerabilities. One of them, CVE-2026-23870, is a single HTTP request that pins your Node process. The bug isn't the bug. The bug is that the framework boundary was a network boundary all along.
How a known-dangerous GitHub Actions pattern keeps compromising npm packages. The TanStack incident, the prior cases, and the checklist that actually prevents it.