Latest articles
Security · Web Development
When `npm install` Becomes a Trap: The New Wave of NPM Malware
A logging library shouldn't be able to steal your AWS keys — yet that's exactly what the latest wave of npm malware is built to do, and it changed how I install.
npmSupply Chain SecurityJavaScriptTypeScriptNode.jsDependency ManagementCI/CDDevSecOpsOpen SourceApplication Security
Software Engineering · Web Development
Why I Keep Coming Back to Angular + NestJS + PostgreSQL
I didn't plan to fall for this stack — but a few months of shipping with Angular, NestJS, and PostgreSQL quietly turned me into a believer, and here's the honest why.
AngularNestJSPostgreSQLTypeScriptFull-Stack DevelopmentClean ArchitectureSystem DesignTypeORMPrismaBackend