--- title: Best Collections posts — March 2026 | daily.dev description: The most upvoted Collections posts from March 2026, curated by the daily.dev community. canonical: https://daily.dev/sources/collections/best-of/2026/03 twitter:card: summary_large_image twitter:site: @dailydotdev og:url: https://daily.dev/sources/collections/best-of/2026/03 og:type: website og:site_name: daily.dev og:title: Best Collections posts — March 2026 | daily.dev og:description: The most upvoted Collections posts from March 2026, curated by the daily.dev community. og:image: https://media.daily.dev/image/upload/s--VAY5ToZt--/f_auto/v1724209435/public/daily.dev%20-%20open%20graph --- # Best of Collections — March 2026 1. 1 [](https://daily.dev/posts/malicious-axios-versions-1-14-1-and-0-30-4-deploy-a-remote-access-trojan-via-supply-chain-attack-rlevdfzaa "Malicious axios versions 1.14.1 and 0.30.4 deploy a remote access trojan via supply chain attack") Article Collections · 24w Malicious axios versions 1.14.1 and 0.30.4 deploy a remote access trojan via supply chain attack Two malicious versions of axios (1.14.1 and 0.30.4) were published to npm on March 31, 2026, after an attacker hijacked a lead maintainer's npm credentials. The packages themselves were clean but pulled in a staged dependency, plain-crypto-js, which ran a postinstall script downloading platform-specific second-stage payloads from a C2 server. The payloads self-deleted after execution to hinder forensics. Socket detected the attack within minutes, Vercel blocked the C2 domain, and the versions were unpublished. Developers should check lockfiles and node\_modules for the affected versions, rotate all secrets from affected environments, pin to safe versions, and add --ignore-scripts to CI npm installs. The incident highlights the systemic risk of unpinned dependencies in ecosystems where a single compromised maintainer account can affect hundreds of millions of weekly installs. 426 25 2. 2 [](https://daily.dev/posts/office-eu-launches-in-the-hague-as-a-european-alternative-to-microsoft-365-dqg8qjfs5 "Office.eu launches in The Hague as a European alternative to Microsoft 365") Article Collections · 26w Office.eu launches in The Hague as a European alternative to Microsoft 365 Office.eu has launched in The Hague as a European-owned cloud productivity suite built on Nextcloud Hub and Collabora Online (LibreOffice-based). It targets users seeking an alternative to Microsoft 365 and Google Workspace, with all data hosted on Hetzner servers in Europe and outside US Cloud Act jurisdiction. The platform includes migration tools and is rolling out by invitation, with a broader European launch planned for Q2 2026\. It arrives amid growing EU digital sovereignty momentum, with 27 member states signing a sovereignty declaration and sovereign cloud spending forecast to triple to $23 billion by 2027\. Nearly 15,000 early access applicants signed up before launch. 194 30 3. 3 [](https://daily.dev/posts/cursor-ai-coding-assistant-now-available-in-jetbrains-ides-scd2iqm5o "Cursor AI Coding Assistant Now Available in JetBrains IDEs") Article Collections · 27w Cursor AI Coding Assistant Now Available in JetBrains IDEs Cursor AI coding assistant is now available inside JetBrains IDEs (IntelliJ IDEA, PyCharm, WebStorm) via the Agent Client Protocol (ACP). The integration gives developers access to frontier models from OpenAI, Anthropic, Google, and Cursor, along with secure codebase indexing and semantic search. It is free for paid Cursor plan subscribers and requires JetBrains IDE version 2025.3.2 or later with the AI Assistant plugin. The move is part of JetBrains' open ecosystem strategy to avoid vendor lock-in by supporting multiple AI agents. 97 11 4. 4 [](https://daily.dev/posts/jetbrains-air-is-now-in-public-preview-an-ide-built-around-ai-agents-rather-than-the-editor-yynrbbejr "JetBrains Air is now in public preview: an IDE built around AI agents rather than the editor") Article Collections · 27w JetBrains Air is now in public preview: an IDE built around AI agents rather than the editor JetBrains has launched two AI-focused developer tools. Air is an agentic development environment (public preview, macOS only) built on the abandoned Fleet IDE codebase, designed to orchestrate multiple AI agents — including OpenAI Codex, Claude, Gemini, and JetBrains' own Junie — concurrently in isolated sessions. It uses the open Agent Client Protocol (ACP) for vendor-neutral agent communication and bundles terminal, Git, code navigation, and preview in one workspace. Junie CLI is a standalone, LLM-agnostic coding agent for terminals, IDEs, and CI/CD pipelines, supporting models from OpenAI, Anthropic, Google, and Grok via bring-your-own-key. It emphasizes codebase structural understanding to avoid what JetBrains calls 'Shadow Tech Debt,' and includes next-task prediction, MCP support, and one-click migration from Claude Code and Codex. Pricing starts at $10/month. JetBrains positions both tools as neutral infrastructure beneath existing agents rather than direct competitors. 41 6 5. 5 [](https://daily.dev/posts/age-verification-laws-are-putting-linux-distros-and-valve-in-a-tough-spot-zpdrpjlrz "Age verification laws are putting Linux distros and Valve in a tough spot") Article Collections · 26w Age verification laws are putting Linux distros and Valve in a tough spot Several US states are passing age verification laws that require operating systems and app stores to verify user ages, creating compliance challenges for Linux distributions and platforms like Valve's Steam. Linux distros lack the centralized account systems these laws assume, leading to varied responses: Ubuntu and Fedora are exploring privacy-conscious local solutions, System76 is lobbying for open-source exemptions in Colorado, while some distros like MidnightBSD have taken extreme steps like license changes. Valve is fighting a New York AG demand for expanded age verification and data collection, arguing payment processors already handle this and additional data collection creates privacy risks. The core tension is that these child safety laws are designed for large commercial platforms and impose centralized data collection mandates that fit poorly with open-source software architecture and privacy-focused platforms. 43 9 6. 6 [](https://daily.dev/posts/typescript-6-0-release-notes-what-changed-and-what-s-deprecated-before-7-0-kynzfji6r "TypeScript 6.0 release notes: what changed and what's deprecated before 7.0") Article Collections · 25w TypeScript 6.0 release notes: what changed and what's deprecated before 7.0 TypeScript 6.0 is a transitional release bridging the current JavaScript-based compiler and the upcoming Go-native TypeScript 7.0\. Key additions include better type inference for this-less functions, subpath imports with \`#/\`, support for combining \`--moduleResolution bundler\` with \`--module commonjs\`, and new standard library types for TC39 Stage 4 proposals like the Temporal API, Map.getOrInsert, and RegExp.escape. Several tsconfig defaults have changed — \`strict\` is now true by default, \`module\` defaults to \`esnext\`, \`target\` to \`es2025\`, and \`types\` to an empty array (which can cut build times by up to 50%). Legacy options including \`--moduleResolution node\`, \`--baseUrl\`, \`--outFile\`, AMD/UMD/SystemJS targets, and \`target: es5\` are deprecated. The Go-native TypeScript 7.0 compiler is already available as a preview and expected within months. 36 7. 7 [](https://daily.dev/posts/ubuntu-26-04-lts-beta-is-out-now-with-gnome-50-linux-7-0-and-no-more-x11-zdmmai90w "Ubuntu 26.04 LTS beta is out now, with GNOME 50, Linux 7.0, and no more X11") Article Collections · 24w Ubuntu 26.04 LTS beta is out now, with GNOME 50, Linux 7.0, and no more X11 Ubuntu 26.04 LTS (Resolute Raccoon) is now in beta ahead of its April 23, 2026 stable release. Key changes include the removal of X11 sessions in favor of Wayland-only (with Xwayland compatibility), GNOME 50 with stable VRR support, and Linux kernel 7.0\. New default apps include Resources (system monitor), Showtime (video player), Loop (Rust-based image viewer), and Tixis (GTK4 terminal). Rust is expanding into core utilities with sudo-rs and uutils included by default. The toolchain updates bring Python 3.14, GCC 15.2, and OpenJDK 25\. GPU support covers NVIDIA 590 and AMD ROCm, now available in official repos. ARM64 joins x86 as a supported architecture. Beta images are available for testing. 51 7 8. 8 [](https://daily.dev/posts/canonical-joins-the-rust-foundation-as-a-gold-member-udywvo5kf "Canonical joins the Rust Foundation as a Gold Member") Article Collections · 25w Canonical joins the Rust Foundation as a Gold Member Canonical has joined the Rust Foundation as a Gold Member at $150,000/year, earning a seat on the Board of Directors alongside Google, Amazon, Meta, and Microsoft. The move formalizes Canonical's existing Rust commitments: Ubuntu 25.10 ships uutils (a Rust rewrite of GNU Coreutils) and sudo-rs instead of their GNU counterparts, and Ubuntu 26.04 LTS will include the latest Rust compiler and Cargo. Canonical's stated governance priorities include improving the Rust developer experience on Ubuntu, keeping toolchain packages current, and addressing security concerns around the crates.io registry — particularly relevant for regulated environments dealing with unknown transitive dependencies. 30 2 9. 9 [](https://daily.dev/posts/wasmer-s-edge-js-runs-node-js-apps-inside-a-webassembly-sandbox-qhzldup0j "Wasmer's Edge.js runs Node.js apps inside a WebAssembly sandbox") Article Collections · 25w Wasmer's Edge.js runs Node.js apps inside a WebAssembly sandbox Wasmer has open-sourced Edge.js, a JavaScript runtime that runs Node.js applications inside a WebAssembly sandbox using WASIX (an extension to WASI). Unlike Deno or Cloudflare Workers, Edge.js doesn't replace the Node.js API surface — it sandboxes only OS syscalls and native code via NAPI, letting existing Node.js v24 apps run unmodified. Wasmer claims it passes 3,592 of 3,626 Node.js compatibility tests, outperforming Bun and Deno on the same suite. The runtime supports V8 and JavaScriptCore, with QuickJS and SpiderMonkey planned. Performance overhead is 5-20% normally and up to 30% with full sandboxing. Notably, the project was built in weeks using OpenAI Codex. It targets AI and edge computing workloads where safely running untrusted Node.js code is a priority. 25 10. 10 [](https://daily.dev/posts/what-s-new-in-powertoys-0-98-mh6exghq1 "What's new in PowerToys 0.98") Article Collections · 25w What's new in PowerToys 0.98 PowerToys 0.98 introduces the Command Palette Dock (preview), letting users pin favorite commands to a persistent screen-edge bar. The Keyboard Manager editor was rebuilt with WinUI 3 and C#, consolidating key and shortcut remaps into a single view with per-remap toggle switches. CursorWrap was rewritten for better multi-monitor support and adds a Ctrl/Shift hold activation mode to prevent accidental wraps. Always on Top gains right-click title bar pinning and transparency controls. Other additions include a ZoomIt video trim editor, Advanced Paste auto-copy hotkeys, and New+ hiding default context menu items. The update is available via in-app updater, WinGet, Microsoft Store, or GitHub. 21 11. 11 [](https://daily.dev/posts/microsoft-s-new-ai-agents-for-net-and-azure-modernization-what-they-actually-do-slkykehrl "Microsoft's new AI agents for .NET and Azure modernization: what they actually do") Article Collections · 26w Microsoft's new AI agents for .NET and Azure modernization: what they actually do Microsoft has released two AI agentic tools in public preview targeting application and infrastructure modernization. The \`modernize-dotnet\` GitHub Copilot custom agent extends .NET modernization workflows to VS Code, CLI, and GitHub, supporting ASP.NET Core, Blazor, Azure Functions, WPF, and more. It follows an assess-plan-execute model and supports custom skills for internal migration patterns. The Azure Copilot migration agent automates discovery, assessment, planning, and deployment for servers, VMs, and databases, aiming to bridge infrastructure and developer workflows. Microsoft claims up to 70% reduction in modernization effort from early customers, though independent validation is lacking. A zero-cost Cloud Accelerate Factory program pairs these tools with expert guidance. Both agents are designed to complement each other but are still in public preview. 20 12. 12 [](https://daily.dev/posts/laravel-13-php-8-3-required-native-attributes-ai-sdk-and-vector-search-nhkwqwlui "Laravel 13: PHP 8.3 required, native Attributes, AI SDK, and vector search") Article Collections · 25w Laravel 13: PHP 8.3 required, native Attributes, AI SDK, and vector search Laravel 13 is released with PHP 8.3 as the minimum requirement. The headline feature is 36 new native PHP attributes covering Eloquent models, queue jobs, Artisan commands, and routing — usable as an opt-in alternative to traditional class properties. The first-party AI SDK (text generation, tool-calling, embeddings, vector store) is now officially stable, as is native JSON:API resource support. New additions include semantic/vector search via pgvector for PostgreSQL, centralized queue routing with Queue::route(), and Cache::touch() for TTL extension. The Laravel Boost installer also gains an AI-assisted upgrade command as an alternative to Laravel Shift. Laravel 11 loses security fix support with this release. 19 13. 13 [](https://daily.dev/posts/project-detroit-oracle-s-plan-to-embed-python-and-javascript-runtimes-inside-the-jvm-aqemjwl5w "Project Detroit: Oracle's plan to embed Python and JavaScript runtimes inside the JVM") Article Collections · 25w Project Detroit: Oracle's plan to embed Python and JavaScript runtimes inside the JVM Oracle announced Project Detroit at JavaOne, an initiative to embed V8 (JavaScript) and CPython (Python) runtimes directly inside the JVM process using the Foreign Function and Memory (FFM) API introduced in Java 22\. Unlike previous approaches like Nashorn that reimplemented languages on the JVM, Project Detroit embeds the actual runtimes, enabling full compatibility with existing JS and Python ecosystems, better performance, and heap isolation for security. The project will be proposed as an official OpenJDK project and implements the javax.script API. Originally proposed in 2018 and abandoned, it was revived due to the FFM API's maturity and growing demand for Python AI library access from Java. Other JavaOne announcements include Java 26 with HTTP/3 support, Helidon joining OpenJDK, and highlights of Java's AI ecosystem including Langchain4j and Spring AI. 20 1 14. 14 [](https://daily.dev/posts/rust-1-94-0-release-key-features-and-enhancements-clz7lt6ey "Rust 1.94.0 Release: Key Features and Enhancements") Article Collections · 27w Rust 1.94.0 Release: Key Features and Enhancements Rust 1.94.0 is now available with several notable additions. The \`array\_windows\` method is stabilized for slices, enabling iteration over constant-length windows with better type inference. AVX-512 FP16 and AArch64 NEON FP16 intrinsics are also stabilized. On the Cargo side, configuration files now support an \`include\` key for modular config management, and the TOML parser has been upgraded to v1.1 with multi-line inline tables, trailing commas, and new escape characters. Additional API stabilizations include mutation methods for \`LazyCell\` and \`LazyLock\`, \`Peekable::next\_if\_map\`, and new math constants like Euler's gamma and the golden ratio. Upgrade via \`rustup update stable\`. 16 1 15. 15 [](https://daily.dev/posts/vue-router-5-file-based-routing-elevates-the-core-with-seamless-transition-jejqoae3x "Vue Router 5: File-Based Routing Elevates the Core with Seamless Transition") Article Collections · 27w Vue Router 5: File-Based Routing Elevates the Core with Seamless Transition Vue Router 5.0 has been officially released with several key improvements. The biggest addition is built-in file-based routing, previously only available via the unplugin-vue-router plugin, now integrated directly into the core. The release also brings enhanced TypeScript support, experimental declarative data loaders tied to route definitions, Volar editor tooling support, a new route JSON schema for validation, and an upgraded devtools API (v8). Existing Vue Router 4 users can migrate without breaking changes. The release also serves as a stepping stone toward Vue Router 6, which will be ESM-only and will remove deprecated APIs. 14 1 [See all Collections archives](/sources/collections/best-of) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@graph":[{"@type":"CollectionPage","@id":"https://daily.dev/sources/collections/best-of/2026/03#page","url":"https://daily.dev/sources/collections/best-of/2026/03","name":"Best Collections Posts — March 2026","description":"The most upvoted Collections posts from March 2026, curated by the daily.dev community.","isPartOf":{"@type":"WebSite","url":"https://daily.dev"}},{"@type":"ItemList","@id":"https://daily.dev/sources/collections/best-of/2026/03#items","numberOfItems":15,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://daily.dev/posts/malicious-axios-versions-1-14-1-and-0-30-4-deploy-a-remote-access-trojan-via-supply-chain-attack-rlevdfzaa","name":"Malicious axios versions 1.14.1 and 0.30.4 deploy a remote access trojan via supply chain attack"},{"@type":"ListItem","position":2,"url":"https://daily.dev/posts/office-eu-launches-in-the-hague-as-a-european-alternative-to-microsoft-365-dqg8qjfs5","name":"Office.eu launches in The Hague as a European alternative to Microsoft 365"},{"@type":"ListItem","position":3,"url":"https://daily.dev/posts/cursor-ai-coding-assistant-now-available-in-jetbrains-ides-scd2iqm5o","name":"Cursor AI Coding Assistant Now Available in JetBrains IDEs"},{"@type":"ListItem","position":4,"url":"https://daily.dev/posts/jetbrains-air-is-now-in-public-preview-an-ide-built-around-ai-agents-rather-than-the-editor-yynrbbejr","name":"JetBrains Air is now in public preview: an IDE built around AI agents rather than the editor"},{"@type":"ListItem","position":5,"url":"https://daily.dev/posts/age-verification-laws-are-putting-linux-distros-and-valve-in-a-tough-spot-zpdrpjlrz","name":"Age verification laws are putting Linux distros and Valve in a tough spot"},{"@type":"ListItem","position":6,"url":"https://daily.dev/posts/typescript-6-0-release-notes-what-changed-and-what-s-deprecated-before-7-0-kynzfji6r","name":"TypeScript 6.0 release notes: what changed and what's deprecated before 7.0"},{"@type":"ListItem","position":7,"url":"https://daily.dev/posts/ubuntu-26-04-lts-beta-is-out-now-with-gnome-50-linux-7-0-and-no-more-x11-zdmmai90w","name":"Ubuntu 26.04 LTS beta is out now, with GNOME 50, Linux 7.0, and no more X11"},{"@type":"ListItem","position":8,"url":"https://daily.dev/posts/canonical-joins-the-rust-foundation-as-a-gold-member-udywvo5kf","name":"Canonical joins the Rust Foundation as a Gold Member"},{"@type":"ListItem","position":9,"url":"https://daily.dev/posts/wasmer-s-edge-js-runs-node-js-apps-inside-a-webassembly-sandbox-qhzldup0j","name":"Wasmer's Edge.js runs Node.js apps inside a WebAssembly sandbox"},{"@type":"ListItem","position":10,"url":"https://daily.dev/posts/what-s-new-in-powertoys-0-98-mh6exghq1","name":"What's new in PowerToys 0.98"},{"@type":"ListItem","position":11,"url":"https://daily.dev/posts/microsoft-s-new-ai-agents-for-net-and-azure-modernization-what-they-actually-do-slkykehrl","name":"Microsoft's new AI agents for .NET and Azure modernization: what they actually do"},{"@type":"ListItem","position":12,"url":"https://daily.dev/posts/laravel-13-php-8-3-required-native-attributes-ai-sdk-and-vector-search-nhkwqwlui","name":"Laravel 13: PHP 8.3 required, native Attributes, AI SDK, and vector search"},{"@type":"ListItem","position":13,"url":"https://daily.dev/posts/project-detroit-oracle-s-plan-to-embed-python-and-javascript-runtimes-inside-the-jvm-aqemjwl5w","name":"Project Detroit: Oracle's plan to embed Python and JavaScript runtimes inside the JVM"},{"@type":"ListItem","position":14,"url":"https://daily.dev/posts/rust-1-94-0-release-key-features-and-enhancements-clz7lt6ey","name":"Rust 1.94.0 Release: Key Features and Enhancements"},{"@type":"ListItem","position":15,"url":"https://daily.dev/posts/vue-router-5-file-based-routing-elevates-the-core-with-seamless-transition-jejqoae3x","name":"Vue Router 5: File-Based Routing Elevates the Core with Seamless Transition"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Sources","item":"https://daily.dev/sources"},{"@type":"ListItem","position":3,"name":"Collections","item":"https://daily.dev/sources/collections"},{"@type":"ListItem","position":4,"name":"Best of","item":"https://daily.dev/sources/collections/best-of"},{"@type":"ListItem","position":5,"name":"March 2026"}]}]} ```