Sascha Becker
Senior Fullstack Javascript Developer with a focus on continuous learning, pleasant user experience, high developer experience, scalable architectures and performant web applications.
On May 6, 2026, React and Next.js patched twelve vulnerabilities. One of them, CVE-2026-23870, is a single HTTP request that pins your Node process. The bug isn't the bug. The bug is that the framework boundary was a network boundary all along.
How a known-dangerous GitHub Actions pattern keeps compromising npm packages. The TanStack incident, the prior cases, and the checklist that actually prevents it.
A short handbook for UX in 2026. The bar for "looks good" is now zero. The work that's left is the questioning, before any pixel is drawn.