How to effectively detect and mitigate Trojan Source attacks in JavaScript codebases with ESLint
Source
SnykHow to effectively detect and mitigate Trojan Source attacks in JavaScript codebases with ESLintsnyk.ioYou might also wanna read
npm's Security Measures Criticized as Insufficient Against AI-Generated Malware in JavaScript Ecosystem
The article criticizes npm's security measures, arguing that reactive solutions like 2FA cooldowns and account freezes are insufficient agai
undercodetesting.com·10d ago
Supply Chain Attacks on Open-Source Software: Case Study of Malicious Pull Request Attempts
The article discusses recent supply chain attacks on open-source software projects like LiteLLM and axios, with a specific case study of att
casco.com·3mo ago
September 2025 NPM supply-chain attack compromises popular JavaScript packages
In September 2025, a coordinated software supply-chain attack targeted multiple popular NPM packages in the JavaScript ecosystem. The attack
AI-Generated npm Package Leaks Its Own GitHub Token, Exposing Malware Operator
A malicious npm package named mouse5212-super-formatter, identified by OX Security, was caught leaking its own hardcoded GitHub token. This
infosecurity-magazine.com·1mo ago
Analyzing JavaScriptCore Vulnerabilities: Developing CodeQL Queries for Security Research
This technical blog post explores JavaScriptCore (JSC), the JavaScript engine used by Safari and other macOS applications. The article provi
cyberark.com·7mo ago
Researcher Discovers Critical React2Shell RCE Vulnerability (CVE-2025-55182) Affecting Millions of Websites
A security researcher recounts discovering a critical remote code execution vulnerability (CVE-2025-55182, dubbed "React2Shell") in the Reac
lachlan.nz·2mo ago
Comments
Sign in to join the conversation.
No comments yet. Be the first.