Active attacks exploit Metro4Shell (CVE-2025-11953) in React Native CLI to execute commands and deploy Rust malware.
Microsoft is progressing on its effort to port the TypeScript compiler and language service from TypeScript/JavaScript to native Go code, a project aligned with the upcoming TypeScript 7.0 release.