The vm2 sandbox component of the open-source JavaScript runtime environment Node.js is vulnerable with certain settings.

Thirteen critical vulnerabilities have been found in the vm2 JavaScript sandbox package that could allow an attacker’s code ...

A critical vulnerability in the popular Node.js sandboxing library vm2 allows escaping the sandbox and executing arbitrary ...

I built a coding tutor that won't let me cheat my way through it. Here's the prompt.

Node.js does not need more theatrical security output. It needs better developer workflow infrastructure. It needs tools that ...

Iran is set to execute its first female protester tied to the January 2026 uprising in Tehran, according to multiple human rights organizations. Bita Hemmati was named in a collective death sentencing ...

Attackers stole a long-lived npm access token belonging to the lead maintainer of axios, the most popular HTTP client library in JavaScript, and used it to publish two poisoned versions that install a ...

VentureBeat made with Google Gemini 3.1 Pro Image Anthropic appears to have accidentally revealed the inner workings of one of its most popular and lucrative AI products, the agentic AI harness Claude ...

The North Korean threat actors behind the Contagious Interview campaign, also tracked as WaterPlum, have been attributed to a malware family tracked as StoatWaffle that's distributed via malicious ...

A lightweight library for secure Node.js execution. No containers, no VMs — just npm-compatible sandboxing out of the box. Powered by the same tech as Cloudflare Workers. Give your agent the ability ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...