Issue #635: npm to scan packages for malware at publish time — Node Weekly

Node Weekly issue #635 covers npm's upcoming malware scanning at publish time, a practical guide to securely releasing npm packages in 2026 (covering staged publishing and trusted publishing), Vercel's new TypeScript-to-native compiler scriptc, and a roundup of releases including Ada v4 URL parser, Wasp v0.25 full-stack framework, modern-tar 0.8, tinyclip 1.0, Nub 0.6, and Verdaccio 6.9.