The threat actor behind the Axios supply chain attack has been aiming at other maintainers in its social engineering campaign. After inviting Saayman to a Slack workspace, the hackers scheduled a ...

Abstract: Prototype pollution is a type of recently-discovered, impactful vulnerability that affects JavaScript code. One important yet challenging research problem of prototype pollution is how to ...

A critical sandbox escape vulnerability has been disclosed in the popular vm2 Node.js library that, if successfully exploited, could allow attackers to run arbitrary code on the underlying operating ...

Node.js has released updates to fix what it described as a critical security issue impacting "virtually every production Node.js app" that, if successfully exploited, could trigger a denial-of-service ...

A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...

TypeScript 5.9 has reached the release candidate (RC) stage with enhancements for modern module behavior, hover tooltips, and deferred module evaluation. Microsoft announced the RC on July 25, ahead ...

In this guide, we'll explore the fundamentals of HTTP by creating a basic web server from scratch using Node.js. Along the way, we'll break down how HTTP requests and responses work and get hands-on ...

If you use Node.js for web development, creation of web apps, and javascript based network applications, you undoubtedly may come across situations where you’d like to make sure that the latest ...

Node.js 22 also enhances the efficiency of developing AbortSignal instances, improving performance in fetchcode and the test runner. The high water mark for streams was increased from 16KiB to 64KiB, ...