Build a lightweight behavioral anomaly detection layer on top of existing audit logs to catch suspicious logins, rapid ...

New Server JS SDK and Hono framework support bring enterprise SSO, auth, and team management to Node.js, Cloudflare Workers, Deno, and Vercel deployments SAN ...

When researching Claude Code, you often see instructions saying, "First, let's install Node.js." However, that is only half correct and half outdated information. As of 2026, you do not need to ...

CVE-2026-26956 is a critical sandbox escape affecting the Node.js sandbox library vm2. In vm2 3.10.4, attacker-controlled JavaScript executed through VM.run() can break out of the sandbox and reach ...

bwip-js is a translation to native JavaScript of the amazing code provided in Barcode Writer in Pure PostScript. The translated code can run on any modern browser or JavaScript-based server framework.

The Node.js project released a critical security update on March 24, 2026, for the Long-Term Support (LTS) branch, designating version 20.20.2 ‘Iron’ as a ...

A critical sandbox escape vulnerability has been disclosed in the popular vm2 Node.js library that, if successfully exploited, could allow attackers to run arbitrary code on the underlying operating ...

Node.js has released updates to fix what it described as a critical security issue impacting "virtually every production Node.js app" that, if successfully exploited, could trigger a denial-of-service ...

High-severity issues dominate this release, with CVE-2025-55131 exposing uninitialized memory in Buffer.alloc and Uint8Array due to timeout races in the vm module, potentially leaking secrets like ...

GachiLoader is a new, heavily obfuscated Node. JS-based loader used to deploy multiple payloads, including the Rhadamanthys infostealer, on compromised Windows machines. It is distributed via the ...

A Discord bot with commands, components and events handler based on the latest discord.js v14 and fully written in JavaScript.