Thirteen critical vulnerabilities have been found in the vm2 JavaScript sandbox package that could allow an attacker’s code ...

A critical vulnerability in the popular Node.js sandboxing library vm2 allows escaping the sandbox and executing arbitrary ...

CVE-2026-44009 (CVSS score: 9.8) - A vulnerability that allows sandbox escape via a null proto exception and permits an ...

Could malicious backdoors be hiding in your code, that otherwise appears perfectly clean to the human eye and text editors alike? A security researcher has shed light on how invisible characters can ...

On Tuesday, a security researcher named Chaofan Shou revealed on X that he had found a 59.8MB JavaScript source map file in a public release of Anthropic's Claude Code. This file is intended for ...

AI-generated computer code is rife with references to non-existent third-party libraries, creating a golden opportunity for supply-chain attacks that poison legitimate programs with malicious packages ...

Microsoft's cross-platform code editor Visual Studio Code (VS Code) now has a built-in JavaScript debugger. That's one less step JavaScript developers need to complete when debugging a project. In the ...