Module Federation 2.0 Reaches Stable Release with Wider Support outside of Webpack

Daniel Curtis — Fri, 03 Apr 2026 10:12:00 GMT

Module Federation 2.0, an open-source micro-frontend mechanism introduced with webpack 5, offers significant updates including dynamic TypeScript type hints, decoupled runtime layers, and Node.js support. It enhances compatibility across various bundlers and frameworks. Key features include a Side Effect Scanner and easier integration for remote modules, addressing previous adoption challenges.

By Daniel Curtis

Axios npm Package Compromised in Supply Chain Attack

Daniel Curtis — Thu, 02 Apr 2026 13:53:00 GMT

On March 31, 2026, two versions of the Axios library were compromised and found to contain a Remote Access Trojan. The malicious packages were published through a hijacked maintainer account. The Axios team is investigating how the breach occurred and has deprecated the affected versions. Security experts emphasize the need for better dependency management.

By Daniel Curtis

InfoQ - Node.js

Module Federation 2.0 Reaches Stable Release with Wider Support outside of Webpack

Axios npm Package Compromised in Supply Chain Attack