A new campaign dubbed 'GhostPoster' is hiding JavaScript code in the image logo of malicious Firefox extensions with more than 50,000 downloads, to monitor browser activity and plant a backdoor. The ...

Starting with TypeScript 7, a compiler port using native code will unlock “better raw performance, memory usage, and parallelism.” For years, the TypeScript compiler has been the heartbeat of modern ...

Abstract: Just-In-Time(JIT) compilers embedded in JavaScript engines significantly boost runtime performance but also introduce difficult-to-detect vulnerabilities. Fuzz testing has proven effective ...

A critical vulnerability in the popular expr-eval JavaScript library, with over 800,000 weekly downloads on NPM, can be exploited to execute code remotely through maliciously crafted input. The ...

What the Script: Supply chain attacks are traditionally designed to inflict maximum damage on structured organizations or companies. However, when such an attack compromises a supply chain that an ...

18 popular NPM packages with over 2 billion weekly downloads were compromised through a phishing attack targeting developer “Qix” The malware functioned as a “crypto-clipper,” silently replacing ...

A large-scale supply chain attack on the JavaScript ecosystem has prompted an urgent warning from Ledger’s chief technology officer, Charles Guillemet, who advised users without hardware wallets to ...

We are a weekly podcast and newsletter made to deliver quick and relevant JavaScript updates in just under 4 minutes. byThis Week in JavaScript@thisweekinjavascript byThis Week in ...

Latest release of the programming language for the Erlang VM and JavaScript runtimes adds ‘find references’ feature and exhaustiveness analysis for strings. Gleam 1.10, a new release of the type-safe ...

In the previous article, we talked about the history of TypeScript and its alternatives. In this article, we will continue our discussion and talk about the most ...