A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and build environments. This report details the attack chain, observed tradecraft, and ...

We are a weekly podcast and newsletter made to deliver quick and relevant JavaScript updates in just under 4 minutes. We are a weekly podcast and newsletter made to deliver quick and relevant ...

Every fight in PRAGMATA follows the same core pattern: hack first, then shoot. Diana exposes enemy weak points through hacking, causing them to glow orange, and Hugh unloads into those spots to deal ...

Need help wrapping your head around Pragmata's Prologue and Sector 1? The beginning of Pragmata introduces you to intrepid space man Hugh Williams as he investigates a huge 3D printing facility on the ...

Sandbox escape vulnerability in vm2, used by nearly 900 NPM packages, allows attackers to bypass security protections and execute arbitrary code. A critical vulnerability has been patched in vm2, a ...

A critical sandbox escape vulnerability has been disclosed in the popular vm2 Node.js library that, if successfully exploited, could allow attackers to run arbitrary code on the underlying operating ...

Node.js has released updates to fix what it described as a critical security issue impacting "virtually every production Node.js app" that, if successfully exploited, could trigger a denial-of-service ...

When you’re getting into web development, you’ll hear a lot about Python and JavaScript. They’re both super popular, but they do different things and have their own quirks. It’s not really about which ...