TypeScript 7.1 Beta, eMudhra CA Compromise & PHP2Shell, and Cloudflare's tsrs Rust Port | News | Ep 86

News for the week of October 12, 2026: the internet is on fire with major security issues from a compromised CA to critical PHP vulnerabilities and remote code execution in Node.js! But at least TypeScript 7.1 beta is out, along with tsrs, a Rust port from oxc team. From the community: a game to help you create a mental model of memory mapping, which new image format is best for the web, and an interview with Daniel Rosenwasser on what comes after TS 7. Sponsored by Excalibur.js Excalibur.js is the free and open source friendly TypeScript 2D game engine for the web. Learn to make web games with TypeScript or JavaScript! Excalibur comes out-of-the-box with everything you need, like physics, sprites, animations, sound effects, and first-party plugins for popular 2D gamedev tools. Homepage and Docs: https://excaliburjs.com Make Your First Game in 10 Minutes Join the Discord: https://discord.gg/9UemP985Uy Chapters (00:00) - Security: eMudhra CA Compromise Allows TLS Impersonation (04:10) - Security: Node.js High CVE for Remote Code Execution (05:53) - Security: PHP2Shell, Critical PHP Vulnerability (07:45) - Security: Socket for Origin Version Control Released (08:51) - Security: What Just Happened? (11:37) - Tooling: TypeScript 7.1 Beta (19:22) - Tooling: tsrs, Cloudflare's Port of TypeScript 7 to Rust (23:28) - Tooling: tsc-ts, Porting TypeScript to TypeScript (with a C Runtime) (24:20) - Tooling: tsc-dotnet, Experimental TypeScript Port to C# (26:36) - Tooling: Bun Working on AOT Compilation? (29:45) - Tooling: Elide the Polyglot Runtime is Now Stable (32:00) - Frameworks: Astro 7.4 Features New Timings Flag for Build (32:40) - Frameworks: TanStack Start 1.0 is Stable (33:40) - Frameworks: Snapfire, TypeScript Web Apps Served in Rust (37:32) - Web Platform: Firefox 158 Now Supports JPEG XL (37:52) - Library Watch: Nuclo, Fast Lightweight DOM Updates (39:01) - Library Watch: OpenWorkflow, an OSS Alternative to Temporal (41:06) - Library Watch: ts-rs, Generate TypeScript Bindings from Rust Types (42:14) - Library Watch: tmcp, a Batteries-included Alternative to Official TypeScript MCP SDK (44:14) - Community Highlights: TypeScript Memory Mapper Game (45:41) - Community: The Register Interviews Ryan Dahl on Deno Joining Cloudflare (47:42) - Community: Josh Goldberg Interviews Daniel Rosenwasser on Software Engineering Daily (48:10) - Community: Filip Sodic on Why Types Are Worth Typing (49:26) - Community: Node Banter on Shipping TS Source in npm (52:30) - Community: Isaac Levin Writes About Building an RSS Reader in TS (53:13) - Community: Next.js on Improving Navigation Experience in v0 (54:02) - Community: Jake Archibald on JPEG XL vs. AVIF for Web Use Cases (56:47) - Bleet of the Week (57:12) - Cool Link: Breadboard Clock Series (58:09) - Cool Link: Teal, Statically Typed Dialect of Lua (58:33) - Cool Link: The Decoherence Trap by Maevyn.codes (01:02:13) - The Minnesota Long Goodbye Security Node.js October 2026 Security Updates CERT-EU - Critical Vulnerabilities in PHP The Internet goes on high alert after discovery of 8 compromised TLS certs - Ars Technica Informal advisory and diagnostics: https://emudhra.we-have-a-problem.com/ Socket for Origin Now Available Tooling Announcing TypeScript 7.1 Beta Introducing tsrs: a Port of TypeScript to Rust tsc-ts: TypeScript in TypeScript, compiles using scriptc typescript-dotnet: Experimental port of TS 7 to C# (via Reddit) Bun AOT in the works Elide: 1.6.0 Changelog Frameworks Astro 7.4 TanStack Start 1.0 is Stable SnapFire: Write TypeScript, served in Rust Library Watch Nuclo: fast lightweight DOM framework for updates OpenWorkflow: OSS workflow engine alternative to Temporal ts-rs: TS Bindings from Rust Types (via Mike) tmcp: build opinionated TypeScript MCP servers (via Paolo) From the Community Prescod: TypeScript Memory Mapper Game (Free) The Register: Interview with Ryan Dahl about Deno + Cloudflare Software Engineering Daily: TypeScript 7 and What Comes Next (Josh Goldberg & Daniel Rosenwasser) Filip Sodic: Types Are Worth Typing Nodeland: Don’t Ship the Source (TypeScript), listen to the podcast episode Isaac Levin: Building an RSS Reader in TypeScript Next.js: Improving navigation experience in v0 with Next.js 16.4 Jake Archibald: JPEG XL vs AVIF for web use-cases Bleet of the Week Cool Links Setting the time on my breadboard clock: Breadboard clock part 5 Statically Typed Lua Ma...