TypeScript extends JavaScript with static type checking, preventing runtime errors by catching mistakes during development.

Google patches CVE-2025-10585, the sixth Chrome zero-day exploited in 2025, affecting V8 JavaScript engine with type ...

Chainguard, the trusted foundation for software development and deployment, today announced Chainguard Libraries for JavaScript, a collection of trusted builds of thousands of common JavaScript ...

It appears, however, that the developer took the legitimate code from the Postmark MCP server's GitHub repository, added the ...

A newly-discovered malicious package with layers of obfuscation is disguised as a utility library, with malware essentially ...

The campaign has been codenamed EvilAI by Trend Micro, describing the attackers behind the operation as "highly capable" ...

Newly discovered npm package 'fezbox' employs QR codes to hide a second-stage payload to steal cookies from a user's web ...

Hackers behind a phishing campaign appear to have used artificial intelligence-generated code to hide malware behind a wall ...

At least 18 popular JavaScript code packages that are collectively downloaded more than two billion times each week were briefly compromised with malicious software today, after a developer involved ...

JavaScript’s low bar to entry has resulted in one of the richest programming language ecosystems in the world. This month’s report celebrates the bounty, while also highlighting a recent example of ...

Microsoft Threat Intelligence stopped an AI-driven credential phishing campaign using SVG files disguised as PDFs ...