Eight innovative tools that are reimagining web applications and how we build them. Welcome to the Great Unbloating.
The Miasma supply chain campaign has sparked a fresh attack wave called Hades, this time involving 37 malicious wheel ...
Cloudflare Inc. today said it has acquired VoidZero Inc., the open-source company behind Vite and the widely used JavaScript ...
Weekly ThreatsDay recap: old bugs, fake tools, shady payload tricks, AI mishaps, and the usual reminder that the internet is ...
Fake Claude Code install sites are pushing malware that steals API keys, developer credentials, crypto wallets, and other ...
Fake Claude Code installer malware used Google Ads to place spoofed AI tool pages above real documentation since March 2026.
The OWASP-backed tool scans JavaScript and TypeScript lockfiles locally, aiming to help developers catch and remediate dependency risks before CI failures.
TAJS is a dataflow analysis for JavaScript that infers type information and call graphs. The current version of the analysis contains a model of ECMAScript 3rd edition, including the standard library, ...
The Tycoon2FA phishing kit now supports device-code phishing attacks and abuses Trustifi click-tracking URLs to hijack Microsoft 365 accounts. Despite an international law enforcement operation ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results