Critical sandbox escape flaw found in popular vm2 NodeJS library

A critical-severity vulnerability in the vm2 Node.js sandbox library, tracked as CVE-2026-22709, allows escaping the sandbox and executing arbitrary code on the underlying host system.
SecurityWeek

‘PackageGate’ Flaws Open JavaScript Ecosystem to Supply Chain Attacks

Vulnerabilities in the NPM, PNPM, VLT, and Bun package managers could lead to protection bypasses and arbitrary code ...
InfoWorld

Unplugged holes in the npm and yarn package managers could let attackers bypass defenses against Shai-Hulud

A researcher at Koi Security says the two key platforms have not plugged the vulnerabilities enabling the worm attacks, and ...
GitHub

Audited & minimal JS implementation of Starknet cryptography.

We support all major platforms and runtimes. Note: the examples use the 'deepStrictEqual' function from the 'assert' built-in NodeJS module to compare values. In Typescript, you must first install the ...
Asian News International

ECMS to reduce India's import dependence for PCBs, Li-ion cells, connectors, camera-display modules

New Delhi [India], January 2 (ANI): The flagship Electronics Component Manufacturing Scheme (ECMS) is expected to significantly increase domestic capability, resulting in reduced imports in some ...