The Node.js project has released important security updates addressing 11 vulnerabilities across its active branches: 22.x, 24.x, and 26.x. The updates are now available as Node.js versions v22.23.2, ...

A dozen critical security vulnerabilities have been disclosed in the vm2 Node.js library that could be exploited by bad actors to break out of the sandbox and execute arbitrary code on susceptible ...

Project already loads these values from .env through config/default.js. --gen-yara Export generated YARA rule node src/index.js --file ./sample.bin --gen-yara --gen-sigma Export generated Sigma rule ...

On March 31, 2026, two new npm packages for updated versions of Axios, a popular HTTP client for JavaScript that simplifies making HTTP requests to a REST endpoint with over 70 million weekly ...

Node.js has released a critical security update addressing multiple vulnerabilities that could allow attackers to crash applications or trigger denial-of-service (DoS) conditions. The update, ...

A combat tracker for D&D, featuring initiative management, HP tracking, status effects, and turn control. Built with Flask for the backend and JavaScript for the frontend, using JSON for data storage.

Security researchers from Socket’s Threat Research Team have identified a coordinated campaign of malicious npm packages that specifically target top JavaScript frameworks, including React, Node.js, ...

Node.js 24 has officially arrived, and it’s bringing a rather tasty selection of improvements to the table. If you’re a developer knee-deep in web apps or wrestling with asynchronous code, this ...

Microsoft is calling attention to an ongoing malvertising campaign that makes use of Node.js to deliver malicious payloads capable of information theft and data exfiltration. The activity, first ...

Microsoft has issued a warning about a surge in cyberattacks leveraging Node.js to deliver malware and steal sensitive information. Since October 2024, its Defender Experts team has observed multiple ...