A critical isolated-vm flaw lets untrusted JavaScript escape the V8 sandbox and potentially hijack the host process.

A critical vulnerability in the Node.js sandboxing library, isolated-vm, has exposed a serious risk to AI agents, automation ...

Spread the loveWhen you’re building modern applications, APIs are the backbone. They’re how different software components ...

JavaScript Explicit Resource Management lands in Safari Technology Preview 250, completing cross-browser support across V8, ...

Ever felt that pang of frustration when your code, which looked perfectly logical on paper, just refuses to behave? You’re not alone. Every developer, from the seasoned pro to the absolute beginner, ...

We've got good news for developers who are enamored with Cloudflare Workers and Durable Objects but don’t want to be tied into that company’s backend infrastructure. Last week, Node.js creator Ryan ...

Rust holds its top 10 spot, Python stays No. 1, the leading languages keep their July positions, and MATLAB drops out of ...

On August 4, 2026, the Shai-Hulud npm worm returned for its sixth major campaign since September 2025 — and for the first time, it introduced three capabilities that no prior wave had shipped: ...

The Node.js project has released important security updates addressing 11 vulnerabilities across its active branches: 22.x, 24.x, and 26.x. The updates are now available as Node.js versions v22.23.2, ...