Following the acquisition by Cloudflare, Alexander Lichter shares insights into VoidZero and the future plans for Vite and other open-source projects.

C-DAC Chennai has released the new notification for the recruitment of Project Engineer, Project Associate and Senior Project ...

JSCeal hides crypto-stealing malware in V8 bytecode, but researchers built a tool to decompile it and expose its advanced ...

Gemini and Claude both built impressive offline utility apps, but only one consistently got the details right.

Attackers abuse Node.js to execute malicious scripts and deploy payloads in attacks targeting governments, technology companies, and hotels.

A critical sandbox escape vulnerability was discovered and patched in isolated-vm, a library for running JavaScript code inside an isolated process. If exploited, the vulnerability could allow ...

A Node.js vendor that works well for a three-month MVP may be a poor choice for a product you expect to maintain for the next five years. Long-term development puts more pressure on architecture, team ...

Every organization running Node.js in production has four days to prepare: the Node.js project will publish security updates for all three of its actively maintained release lines on or shortly after ...

The Node.js project has released critical security updates across its 22.x, 24.x, and 26.x release lines, addressing 12 vulnerabilities, including two high-severity flaws that could enable ...

Developers managing JavaScript runtimes have a new major version to evaluate. Node.js 26.0.0 brings the long-awaited Temporal API to the platform alongside an updated V8 engine, a refreshed HTTP ...

JavaScript and Node.js teams do not lack security tools. What they still lack is a dependency security workflow that developers will actually use before release. That is the real gap. A package gets ...

Almost any browser is at a fundamental disadvantage in terms of users and influence (that is, unless you’re Google or Microsoft). But that hasn’t stopped Mozilla ...