<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:dc="http://purl.org/dc/elements/1.1/" version="2.0">
  <channel>
    <title>InfoQ</title>
    <link>https://www.infoq.com</link>
    <description>InfoQ feed</description>
    <item>
      <title>Pinterest Reduces Spark OOM Failures by 96% Through Auto Memory Retries</title>
      <link>https://www.infoq.com/news/2026/04/pinterest-spark-oom-reduction/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=global</link>
      <description>&lt;img src="https://res.infoq.com/news/2026/04/pinterest-spark-oom-reduction/en/headerimage/workflow-1775338668860.jpeg"/&gt;&lt;p&gt;Pinterest Engineering cut Apache Spark out-of-memory failures by 96% using improved observability, configuration tuning, and automatic memory retries. Staged rollout, dashboards, and proactive memory adjustments stabilized data pipelines, reduced manual intervention, and lowered operational overhead across tens of thousands of daily jobs.&lt;/p&gt; &lt;i&gt;By Leela Kumili&lt;/i&gt;</description>
      <category>Big Data</category>
      <category>Optimization</category>
      <category>Cost Optimization</category>
      <category>Memory</category>
      <category>Architecture Analysis</category>
      <category>Batch Processing</category>
      <category>Observability</category>
      <category>Architecture</category>
      <category>Distributed Systems</category>
      <category>Apache Spark</category>
      <category>Development</category>
      <category>Architecture &amp; Design</category>
      <category>news</category>
      <pubDate>Mon, 06 Apr 2026 14:32:00 GMT</pubDate>
      <guid>https://www.infoq.com/news/2026/04/pinterest-spark-oom-reduction/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=global</guid>
      <dc:creator>Leela Kumili</dc:creator>
      <dc:date>2026-04-06T14:32:00Z</dc:date>
      <dc:identifier>/news/2026/04/pinterest-spark-oom-reduction/en</dc:identifier>
    </item>
    <item>
      <title>Presentation: Duolingo's Kubernetes Leap</title>
      <link>https://www.infoq.com/presentations/duolingo-eks-kubernetes/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=global</link>
      <description>&lt;img src="https://res.infoq.com/presentations/duolingo-eks-kubernetes/en/mediumimage/Franka-Passing-medium-1774441713171.jpg"/&gt;&lt;p&gt;Franka Passing discusses the architectural shift of Duolingo’s 500+ backend services to Kubernetes. She explains the move toward GitOps with Argo CD, the transition to IPv6-only pods, and the "cellular architecture" used to isolate environments. She shares "reports from the trenches" on managing developer trust, navigating AWS rate limits, and productionizing early adopter services.&lt;/p&gt; &lt;i&gt;By Franka Passing&lt;/i&gt;</description>
      <category>Kubernetes</category>
      <category>Transcripts</category>
      <category>Case Study</category>
      <category>InfoQ Dev Summit Munich 2025</category>
      <category>DevOps</category>
      <category>presentation</category>
      <pubDate>Mon, 06 Apr 2026 12:11:00 GMT</pubDate>
      <guid>https://www.infoq.com/presentations/duolingo-eks-kubernetes/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=global</guid>
      <dc:creator>Franka Passing</dc:creator>
      <dc:date>2026-04-06T12:11:00Z</dc:date>
      <dc:identifier>/presentations/duolingo-eks-kubernetes/en</dc:identifier>
    </item>
    <item>
      <title>Article: A Better Alternative to Reducing CI Regression Test Suite Sizes</title>
      <link>https://www.infoq.com/articles/alternative-reduce-test-suite-size/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=global</link>
      <description>&lt;img src="https://res.infoq.com/articles/alternative-reduce-test-suite-size/en/headerimage/alternative-reduce-test-suite-size-header-1774943323622.jpg"/&gt;&lt;p&gt;How can you focus in a sea of results from a large regression test suite? This article describes a stochastic approach that relies on some degree of redundancy in your CI regression test set. This approach does not guarantee you will catch every bug every time, but it gives you your best bet of not missing the subtle signatures of all the bugs uncovered by your CI regression test suite runs.&lt;/p&gt; &lt;i&gt;By James Bornefelt Westfall&lt;/i&gt;</description>
      <category>Metrics</category>
      <category>Testing</category>
      <category>Quality</category>
      <category>Software Testing</category>
      <category>Feedback</category>
      <category>Regression Testing</category>
      <category>Defects</category>
      <category>Code Coverage</category>
      <category>Integration Test</category>
      <category>Development</category>
      <category>Culture &amp; Methods</category>
      <category>article</category>
      <pubDate>Mon, 06 Apr 2026 11:00:00 GMT</pubDate>
      <guid>https://www.infoq.com/articles/alternative-reduce-test-suite-size/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=global</guid>
      <dc:creator>James Bornefelt Westfall</dc:creator>
      <dc:date>2026-04-06T11:00:00Z</dc:date>
      <dc:identifier>/articles/alternative-reduce-test-suite-size/en</dc:identifier>
    </item>
    <item>
      <title>Podcast: Context Engineering with Adi Polak</title>
      <link>https://www.infoq.com/podcasts/context-engineering-large-language-models/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=global</link>
      <description>&lt;img src="https://res.infoq.com/podcasts/context-engineering-large-language-models/en/smallimage/the-infoq-podcast-logo-thumbnail-1775129463355.jpg"/&gt;&lt;p&gt;In this episode, Thomas Betts and Adi Polak talk about the need for context engineering when interacting with LLMs and designing agentic systems. Prompt engineering techniques work with a stateless approach, while context engineering allows AI systems to be stateful.&lt;/p&gt; &lt;i&gt;By Adi Polak&lt;/i&gt;</description>
      <category>Agents</category>
      <category>The InfoQ Podcast</category>
      <category>Artificial Intelligence</category>
      <category>AI Architecture</category>
      <category>Design</category>
      <category>Architecture</category>
      <category>Large language models</category>
      <category>Architecture &amp; Design</category>
      <category>AI, ML &amp; Data Engineering</category>
      <category>podcast</category>
      <pubDate>Mon, 06 Apr 2026 11:00:00 GMT</pubDate>
      <guid>https://www.infoq.com/podcasts/context-engineering-large-language-models/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=global</guid>
      <dc:creator>Adi Polak</dc:creator>
      <dc:date>2026-04-06T11:00:00Z</dc:date>
      <dc:identifier>/podcasts/context-engineering-large-language-models/en</dc:identifier>
    </item>
    <item>
      <title>Dynamic Languages Faster and Cheaper in 13-Language Claude Code Benchmark</title>
      <link>https://www.infoq.com/news/2026/04/ai-coding-language-benchmark/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=global</link>
      <description>&lt;img src="https://www.infoq.com/styles/static/images/logo/logo_bigger.jpg"/&gt;&lt;p&gt;A 600-run benchmark by Ruby committer Yusuke Endoh tested Claude Code across 13 languages, implementing a simplified Git. Ruby, Python, and JavaScript were the fastest and cheapest, at $0.36- $0.39 per run. Statistically typed languages cost 1.4-2.6x more. Adding type checkers to dynamic languages imposed 1.6-3.2x slowdowns. Full dataset available on GitHub.&lt;/p&gt; &lt;i&gt;By Steef-Jan Wiggers&lt;/i&gt;</description>
      <category>Artificial Intelligence</category>
      <category>Claude</category>
      <category>AI Coding</category>
      <category>Programming Languages</category>
      <category>Development</category>
      <category>Architecture &amp; Design</category>
      <category>AI, ML &amp; Data Engineering</category>
      <category>news</category>
      <pubDate>Mon, 06 Apr 2026 04:01:00 GMT</pubDate>
      <guid>https://www.infoq.com/news/2026/04/ai-coding-language-benchmark/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=global</guid>
      <dc:creator>Steef-Jan Wiggers</dc:creator>
      <dc:date>2026-04-06T04:01:00Z</dc:date>
      <dc:identifier>/news/2026/04/ai-coding-language-benchmark/en</dc:identifier>
    </item>
    <item>
      <title>Java News Roundup: TornadoVM 4.0, Google ADK for Java 1.0, Grails, Tomcat, Log4j, Gradle</title>
      <link>https://www.infoq.com/news/2026/04/java-news-roundup-mar30-2026/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=global</link>
      <description>&lt;img src="https://res.infoq.com/news/2026/04/java-news-roundup-mar30-2026/en/headerimage/java-istock-image-01-1775426752167.jpg"/&gt;&lt;p&gt;This week's Java roundup for March 30th, 2026, features news highlighting: the GA release of TornadoVM 4.0 and Google ADK for Java 1.0; first release candidates of Grails and Gradle; maintenance releases of Micronaut, Apache Tomcart and Apache Log4j; and an update on Jakarta EE 12.&lt;/p&gt; &lt;i&gt;By Michael Redlich&lt;/i&gt;</description>
      <category>Agents</category>
      <category>Gradle</category>
      <category>Micronaut</category>
      <category>Grails</category>
      <category>log4j</category>
      <category>Apache Tomcat</category>
      <category>JDK 27</category>
      <category>Jakarta EE</category>
      <category>Java</category>
      <category>TornadoVM</category>
      <category>Development</category>
      <category>Architecture &amp; Design</category>
      <category>news</category>
      <pubDate>Mon, 06 Apr 2026 02:30:00 GMT</pubDate>
      <guid>https://www.infoq.com/news/2026/04/java-news-roundup-mar30-2026/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=global</guid>
      <dc:creator>Michael Redlich</dc:creator>
      <dc:date>2026-04-06T02:30:00Z</dc:date>
      <dc:identifier>/news/2026/04/java-news-roundup-mar30-2026/en</dc:identifier>
    </item>
    <item>
      <title>Anthropic  Designs Three-Agent Harness Supports Long-Running Full-Stack AI Development</title>
      <link>https://www.infoq.com/news/2026/04/anthropic-three-agent-harness-ai/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=global</link>
      <description>&lt;img src="https://res.infoq.com/news/2026/04/anthropic-three-agent-harness-ai/en/headerimage/generatedHeaderImage-1774590768994.jpg"/&gt;&lt;p&gt;Anthropic introduces a three-agent harness separating planning, generation, and evaluation to improve long-running autonomous AI workflows for frontend and full-stack development. Industry commentary highlights structured approaches, iterative evaluation, and practical methods to maintain coherence and quality over multi-hour AI coding sessions.&lt;/p&gt; &lt;i&gt;By Leela Kumili&lt;/i&gt;</description>
      <category>Agents</category>
      <category>Software Engineering</category>
      <category>Model Context Protocol (MCP)</category>
      <category>AI Architecture</category>
      <category>Orchestration</category>
      <category>SDK</category>
      <category>Front-end</category>
      <category>Workflow / BPM</category>
      <category>Model</category>
      <category>autonomous</category>
      <category>Development</category>
      <category>Architecture &amp; Design</category>
      <category>AI, ML &amp; Data Engineering</category>
      <category>news</category>
      <pubDate>Sat, 04 Apr 2026 14:24:00 GMT</pubDate>
      <guid>https://www.infoq.com/news/2026/04/anthropic-three-agent-harness-ai/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=global</guid>
      <dc:creator>Leela Kumili</dc:creator>
      <dc:date>2026-04-04T14:24:00Z</dc:date>
      <dc:identifier>/news/2026/04/anthropic-three-agent-harness-ai/en</dc:identifier>
    </item>
    <item>
      <title>TigerFS Mounts PostgreSQL Databases as a Filesystem for Developers and AI Agents</title>
      <link>https://www.infoq.com/news/2026/04/tigerfs-postgresql-filesystem/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=global</link>
      <description>&lt;img src="https://res.infoq.com/news/2026/04/tigerfs-postgresql-filesystem/en/headerimage/generatedHeaderImage-1774426958711.jpg"/&gt;&lt;p&gt;TigerFS is a new experimental filesystem that mounts a database as a directory and stores files directly in PostgreSQL. The open source project exposes database data through a standard filesystem interface, allowing developers and AI agents to interact with it using common Unix tools such as ls, cat, find, and grep, rather than via APIs or SDKs.&lt;/p&gt; &lt;i&gt;By Renato Losio&lt;/i&gt;</description>
      <category>Database</category>
      <category>Agents</category>
      <category>Linux</category>
      <category>Postgres</category>
      <category>Fuse</category>
      <category>Open Source</category>
      <category>Development</category>
      <category>AI, ML &amp; Data Engineering</category>
      <category>news</category>
      <pubDate>Sat, 04 Apr 2026 08:18:00 GMT</pubDate>
      <guid>https://www.infoq.com/news/2026/04/tigerfs-postgresql-filesystem/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=global</guid>
      <dc:creator>Renato Losio</dc:creator>
      <dc:date>2026-04-04T08:18:00Z</dc:date>
      <dc:identifier>/news/2026/04/tigerfs-postgresql-filesystem/en</dc:identifier>
    </item>
    <item>
      <title>Swift 6.3 Stabilizes Android SDK, Extends C Interop, and More</title>
      <link>https://www.infoq.com/news/2026/04/swift-6-3-android-c-interop/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=global</link>
      <description>&lt;img src="https://res.infoq.com/news/2026/04/swift-6-3-android-c-interop/en/headerimage/swift-6-3-released-1775232816383.jpeg"/&gt;&lt;p&gt;Swift 6.3 advances Swift cross-platform story with official Android support, improves significantly C interoperability through the new @c attribute, and continues extending embedded programming support. It also strengthens the ecosystem with a unified build system direction and gives developers more low-level performance control.&lt;/p&gt; &lt;i&gt;By Sergio De Simone&lt;/i&gt;</description>
      <category>Mobile</category>
      <category>iOS</category>
      <category>Apple</category>
      <category>Embedded Software Dev</category>
      <category>MacOS</category>
      <category>Swift</category>
      <category>Open Source</category>
      <category>Android</category>
      <category>Development</category>
      <category>news</category>
      <pubDate>Fri, 03 Apr 2026 17:00:00 GMT</pubDate>
      <guid>https://www.infoq.com/news/2026/04/swift-6-3-android-c-interop/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=global</guid>
      <dc:creator>Sergio De Simone</dc:creator>
      <dc:date>2026-04-03T17:00:00Z</dc:date>
      <dc:identifier>/news/2026/04/swift-6-3-android-c-interop/en</dc:identifier>
    </item>
    <item>
      <title>Open Source Security Tool Trivy Hit by Supply Chain Attack, Prompting Urgent Industry Response</title>
      <link>https://www.infoq.com/news/2026/04/trivy-supply-chain-attack/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=global</link>
      <description>&lt;img src="https://res.infoq.com/news/2026/04/trivy-supply-chain-attack/en/headerimage/generatedHeaderImage-1774788388998.jpg"/&gt;&lt;p&gt;A major security incident affecting the widely used open source vulnerability scanner Trivy has exposed critical weaknesses in software supply chain security, after maintainers confirmed that a malicious release was briefly distributed to users.&lt;/p&gt; &lt;i&gt;By Craig Risi&lt;/i&gt;</description>
      <category>Incident Response</category>
      <category>Cloud Security</category>
      <category>Open Source</category>
      <category>DevOps</category>
      <category>news</category>
      <pubDate>Fri, 03 Apr 2026 12:00:00 GMT</pubDate>
      <guid>https://www.infoq.com/news/2026/04/trivy-supply-chain-attack/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=global</guid>
      <dc:creator>Craig Risi</dc:creator>
      <dc:date>2026-04-03T12:00:00Z</dc:date>
      <dc:identifier>/news/2026/04/trivy-supply-chain-attack/en</dc:identifier>
    </item>
    <item>
      <title>Module Federation 2.0 Reaches Stable Release with Wider Support outside of Webpack</title>
      <link>https://www.infoq.com/news/2026/04/module-federation-2-stable/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=global</link>
      <description>&lt;img src="https://res.infoq.com/news/2026/04/module-federation-2-stable/en/headerimage/generatedHeaderImage-1774870811998.jpg"/&gt;&lt;p&gt;Module Federation 2.0, an open-source micro-frontend mechanism introduced with webpack 5, offers significant updates including dynamic TypeScript type hints, decoupled runtime layers, and Node.js support. It enhances compatibility across various bundlers and frameworks. Key features include a Side Effect Scanner and easier integration for remote modules, addressing previous adoption challenges.&lt;/p&gt; &lt;i&gt;By Daniel Curtis&lt;/i&gt;</description>
      <category>JavaScript</category>
      <category>Web Development</category>
      <category>Node.js</category>
      <category>Micro Frontends</category>
      <category>Bundlers</category>
      <category>Development</category>
      <category>news</category>
      <pubDate>Fri, 03 Apr 2026 10:12:00 GMT</pubDate>
      <guid>https://www.infoq.com/news/2026/04/module-federation-2-stable/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=global</guid>
      <dc:creator>Daniel Curtis</dc:creator>
      <dc:date>2026-04-03T10:12:00Z</dc:date>
      <dc:identifier>/news/2026/04/module-federation-2-stable/en</dc:identifier>
    </item>
    <item>
      <title>Presentation: Panel: Taking Architecture out of the Echo Chamber</title>
      <link>https://www.infoq.com/presentations/panel-complexity-architecture/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=global</link>
      <description>&lt;img src="https://res.infoq.com/presentations/panel-complexity-architecture/en/mediumimage/ln-540x400-1774440712030.jpg"/&gt;&lt;p&gt;Andrew Harmel-Law and a panel of expert architects discuss the shifting practice of architecture in 2025. They explain strategies for communicating technical debt to stakeholders, the benefits of decentralized decision-making through ADRs, and the career paths of modern leaders. The panel shares insights on bridging the gap between mobile and backend teams to ensure a holistic system.&lt;/p&gt; &lt;i&gt;By Andrew Harmel-Law, Cat Morris, Diana Montalion, Shana Dacres-Lawrence, Vanessa Formicola, Elena Stojmilova, Peter Hunter&lt;/i&gt;</description>
      <category>Panel</category>
      <category>QCon London 2025</category>
      <category>Transcripts</category>
      <category>Actionable Architecture</category>
      <category>Architecture &amp; Design</category>
      <category>presentation</category>
      <pubDate>Fri, 03 Apr 2026 09:19:00 GMT</pubDate>
      <guid>https://www.infoq.com/presentations/panel-complexity-architecture/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=global</guid>
      <dc:creator>Andrew Harmel-Law, Cat Morris, Diana Montalion, Shana Dacres-Lawrence, Vanessa Formicola, Elena Stojmilova, Peter Hunter</dc:creator>
      <dc:date>2026-04-03T09:19:00Z</dc:date>
      <dc:identifier>/presentations/panel-complexity-architecture/en</dc:identifier>
    </item>
    <item>
      <title>Article: Replacing Database Sequences at Scale without Breaking 100+ Services</title>
      <link>https://www.infoq.com/articles/replacing-database-sequences/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=global</link>
      <description>&lt;img src="https://res.infoq.com/articles/replacing-database-sequences/en/headerimage/replacing-database-sequences-header-1774603762739.jpg"/&gt;&lt;p&gt;The article discusses the challenges faced during a migration from a relational database to NoSQL, focusing on the importance of database sequences for unique identifiers. It outlines the development of a new sequence service using DynamoDB and a two-tier caching architecture.&lt;/p&gt; &lt;i&gt;By Saumya Tyagi&lt;/i&gt;</description>
      <category>AWS</category>
      <category>Dynamo DB</category>
      <category>NoSQL</category>
      <category>Distributed Systems</category>
      <category>Caching</category>
      <category>Development</category>
      <category>Architecture &amp; Design</category>
      <category>article</category>
      <pubDate>Fri, 03 Apr 2026 09:00:00 GMT</pubDate>
      <guid>https://www.infoq.com/articles/replacing-database-sequences/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=global</guid>
      <dc:creator>Saumya Tyagi</dc:creator>
      <dc:date>2026-04-03T09:00:00Z</dc:date>
      <dc:identifier>/articles/replacing-database-sequences/en</dc:identifier>
    </item>
    <item>
      <title>GitHub Integrates AI to Improve Accessibility Issue Management and Automate Feedback Triage</title>
      <link>https://www.infoq.com/news/2026/04/github-ai-accessibility-workflow/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=global</link>
      <description>&lt;img src="https://res.infoq.com/news/2026/04/github-ai-accessibility-workflow/en/headerimage/intakeworkflow-1774202211278.jpeg"/&gt;&lt;p&gt;GitHub has launched a continuous AI-powered workflow to manage accessibility feedback at scale. Using GitHub Actions, Copilot, and Models APIs, the system centralizes reports, analyzes WCAG compliance, and automates triage while maintaining human validation. Teams now resolve feedback faster, improving inclusion and cross-functional collaboration.&lt;/p&gt; &lt;i&gt;By Leela Kumili&lt;/i&gt;</description>
      <category>github</category>
      <category>AI Architecture</category>
      <category>Feedback</category>
      <category>copilot</category>
      <category>Inclusion</category>
      <category>GitHub Actions</category>
      <category>Workflow / BPM</category>
      <category>Accessibility</category>
      <category>Developer Experience</category>
      <category>AI Development</category>
      <category>Development</category>
      <category>Architecture &amp; Design</category>
      <category>AI, ML &amp; Data Engineering</category>
      <category>news</category>
      <pubDate>Thu, 02 Apr 2026 14:45:00 GMT</pubDate>
      <guid>https://www.infoq.com/news/2026/04/github-ai-accessibility-workflow/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=global</guid>
      <dc:creator>Leela Kumili</dc:creator>
      <dc:date>2026-04-02T14:45:00Z</dc:date>
      <dc:identifier>/news/2026/04/github-ai-accessibility-workflow/en</dc:identifier>
    </item>
    <item>
      <title>Axios npm Package Compromised in Supply Chain Attack</title>
      <link>https://www.infoq.com/news/2026/04/axios-supply-chain/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=global</link>
      <description>&lt;img src="https://res.infoq.com/news/2026/04/axios-supply-chain/en/headerimage/generatedHeaderImage-1775126213919.jpg"/&gt;&lt;p&gt;On March 31, 2026, two versions of the Axios library were compromised and found to contain a Remote Access Trojan. The malicious packages were published through a hijacked maintainer account. The Axios team is investigating how the breach occurred and has deprecated the affected versions. Security experts emphasize the need for better dependency management.&lt;/p&gt; &lt;i&gt;By Daniel Curtis&lt;/i&gt;</description>
      <category>Application Security</category>
      <category>NPM</category>
      <category>CVE</category>
      <category>Web Development</category>
      <category>Node.js</category>
      <category>Development</category>
      <category>news</category>
      <pubDate>Thu, 02 Apr 2026 13:53:00 GMT</pubDate>
      <guid>https://www.infoq.com/news/2026/04/axios-supply-chain/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=global</guid>
      <dc:creator>Daniel Curtis</dc:creator>
      <dc:date>2026-04-02T13:53:00Z</dc:date>
      <dc:identifier>/news/2026/04/axios-supply-chain/en</dc:identifier>
    </item>
  </channel>
</rss>
