
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
On the 6th of January 2026 this repository changed the ownership to one of it's maintainers, BePo65 to reduce the workload on g-mero.
EsDay is a JavaScript library inspired by Day.js.
Esday has an API largely similar to Day.js (v1.11.13), but it is written in TypeScript and fully supports es modules.
Being compatible to Day.js, EsDay is also a good replacement for Moment.js.
Highlights
import { esday } from 'esday'
import { isTodayPlugin } from 'esday/plugins/isToday'
esday.extend(isTodayPlugin)
esday('2024-12-10').set('year', 2025).add(1, 'month').isToday()
For detailed information see the full documentation.
Invalid date instead of Invalid Date.Esday uses moment@2.30.1 as api reference.
In the folder dev there is a template for creating new plugins and a template for new locale definitions.
This project is licensed under the MIT License.
This project also partially contains code derived or copied from the following projects:
FAQs
A simple date library fully written in TypeScript
The npm package esday receives a total of 11 weekly downloads. As such, esday popularity was classified as not popular.
We found that esday demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.