Every Node.js project accumulates vulnerable dependencies. The npm registry holds over 2.5 million packages, and researchers found 454,000 malicious or vulnerable packages uploaded in 2025 alone.
CISA KEV added GPUStack, FreeSWITCH, OpenSSH and IBM Aspera Faspex flaws on Nov. 9. See affected versions, fixes and the Nov.
Both private actors and also state actors, like Russia or North Korea, are breaking into systems all over thanks to AI ...
You can find security holes (vulnerabilities) remaining in your code using your own AI before anyone else does. Claude Code provides four features for this purpose.This article is for those who are bu ...
Explore the latest news, real-world incidents, expert analysis, and trends in Gitlab — only on The Hacker News, the leading ...
The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...
Security Boulevard's weekly after-action roundup returns with the incidents from the past seven days that security teams ...
Opinion
22dOpinion
The Internet May Be Quietly Starting to Break | Let's Turn Six Trust-Shaking Events in One Week into a Story About a City
Hello, Opi-san here.On October 21, from the evening through the night, Japanese websites switched one after another to "emergency maintenance" screens. From pixiv, smartphone games, online shopping, ...
As enterprises rely more on AI technologies and services, attackers’ living-off-the-land techniques have evolved to abuse them.
Node upgrade broke your app? Fixes for NODE_MODULE_VERSION errors, missing _stream_readable, writeHeader, removed flags and ...
CISA ordered federal agencies to patch a critical Node.js Brotli decoder flaw by November 10 after confirming active ...
The Node.js Project shipped coordinated security releases on November 11, 2026. They cover the 22.x, 24.x and 26.x lines in v22.23.5, v24.22.3 and v26.13.1.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results