|
THE NUMBER
|
9%
of remote JavaScript jobs on my board don't name a country or region.
|
The other 91% limit you to specific countries or regions. Often that limit sits in the location field, three screens below a paragraph about “working from anywhere.” Before you write a cover letter, scroll to the location line. It decides more than the stack list does.
Based on 394 active remote listings on jsgurujobs.com, November 1, 2026. One job board, not the whole market.
|
|
5 JOBS WORTH APPLYING TO
Software Engineer, Centre for Effective Altruism
Remote, global. $134,900–$166,725
Products that reach hundreds of thousands of people. TypeScript, Node.js, React, Next.js and PostgreSQL. One of the few roles this week that is open anywhere and shows the salary.
Lead Front-End Developer, E-Commerce, iFIT
Remote, United States. $120,000–$140,000
You lead the front end of the store behind a health and fitness platform. Next.js, React, GraphQL, TypeScript. The most clicked new role on the board this week.
Senior Software Engineer II, Boulevard
Remote, United States. $184,000–$230,000
A client experience platform for salons, spas and other appointment-based businesses. React and TypeScript on the front end, Elixir on the back. The highest salary in this list.
Web Developer, Cohere
Remote, Toronto, Canada. CA$180,000–CA$250,000
The web team at one of the bigger enterprise AI companies. Next.js, TypeScript, Tailwind, Sanity, Turborepo. A frontend role at an AI company with the salary in the open.
Senior Full Stack Software Engineer (GovTech & AI), Lexaru
Remote-first, Germany or Austria. From €4,061 a month gross, more with experience
A platform for public administrations with AI and LLM features built in. TypeScript, Svelte, Vue, Node.js. The listing is written in German.
|
Some of these will close fast. New remote JavaScript roles with salary and hiring location are added to the board every morning.
Prefer GitHub? The same list lives in awesome-javascript-jobs. A star helps other developers find it.
|
|
|
THE BIG STORY
Think twice before you npm install a take-home
On October 29, about $6.3 billion left Binance hot wallets, most of it in roughly 20 minutes. Binance links the breach to a compromised DevOps engineer's laptop that gave the attacker a path to a service container and the ability to submit unauthorized withdrawals. No private key leaked. Co-CEO Richard Teng said the attacker “did not simply use one engineer's permissions, and this was not a single ‘one-click’ action.”
Blockchain analysts at TRM and Chainalysis attribute the attack to TraderTraitor, a North Korean state-backed group. Binance itself has not named anyone.
How the laptop was compromised is not public yet. But this group has a known pattern. In 2022 the FBI and CISA warned that it targets people at crypto companies with messages that often look like recruitment offers for high-paying jobs, and it tends to go after sysadmin and DevOps roles first.
If you are job hunting, one habit is worth adopting today. When a recruiter you have never heard of sends a take-home repo, don't run npm install on the laptop that has your production access, your SSH keys and your company's npm token. Open it in a VM or a dev container first. Install scripts run the moment you install.
|
|
ALSO HAPPENING
Node.js 27 is in alpha. The first alpha landed on October 29 with V8 15.6. Two changes to know before it ships: if you do not set --max-old-space-size, the default heap limit becomes half of physical memory, clamped between 256 MB and 4 GB, so check your container memory settings. And Intel macOS support drops to experimental. Release notes
Node.js 26.13.0 and 24.22.2 LTS shipped on October 28. If you skipped the October 21 security releases, this is a good moment to catch up. Node.js blog
|