The jsPDF library for generating PDF documents in JavaScript applications is vulnerable to a critical vulnerability that ...

A critical CVSS 9.2 flaw in AdonisJS bodyparser lets attackers write arbitrary files via path traversal when uploads are ...

So I’ll do a quick tour of the graveyard before I present some silver linings in this historic Alabama loss.

Trust Wallet believes the compromise of its web browser to steal roughly $8.5 million from over 2,500 crypto wallets is ...

When security vulnerabilities appear in popular frameworks, they can affect thousands of websites overnight. That’s exactly what’s happening with a newly discovered vulnerability in Next.js – one of ...

Jsfuzz is coverage-guided fuzzer for testing javascript/nodejs packages. Fuzzing for safe languages like nodejs is a powerful strategy for finding bugs like unhandled exceptions, logic bugs, security ...

This concept isn’t new—in fact, it is the essence of representational state transfer (REST). Instead of converting to a ...

A newly discovered third variant of the Shai Hulud malware is raising fresh concerns about the security of the open-source software supply chain, as researchers warn that the latest version shows more ...

A new strain of the Shai Hulud worm is discovered by researchers, signaling the self-propagating supply chain threat ...

As a worm spread through hundreds of npm packages in 2025, it didn't exploit a vulnerability – it exploited the architecture.

Hackers behind the Shai Hulud malicious npm JavaScript campaign are likely testing a new variant of the malware. Security ...

The explosive, easy-to-trigger vulnerability was exploited within hours of disclosure, exposing the risks of default ...