Anthropic’s move into the JavaScript ecosystem surprised almost everyone. Buying a popular runtime isn’t just a tooling ...

A critical Grist-Core flaw (CVE-2026-24002, CVSS 9.1) allows remote code execution through malicious formulas when Pyodide ...

Overview: TypeScript is widely used in large projects because its typing works better with AI coding assistants and reduces ...

Here's how the JavaScript Registry evolves makes building, sharing, and using JavaScript packages simpler and more secure ...

Several security vulnerabilities, some classified as high-risk, have been discovered in the popular JavaScript runtime environment Node.js. Updated versions, announced in mid-December, have now been ...

Strip the types and hotwire the HTML—and triple check your package security while you are at it. JavaScript in 2026 is just ...

Sandbox escape vulnerability in vm2, used by nearly 900 NPM packages, allows attackers to bypass security protections and ...

Critical n8n v CVE-2026-25049 allows authenticated workflow abuse to execute system commands and expose server data.

What if a phishing page was generated on the spot?

A compromised Open VSX publisher account was used to distribute malicious extensions in a new GlassWorm supply chain attack.