JavaScript packages with billions of downloads were compromised by an unknown threat actor looking to steal cryptocurrency.

A cryptocurrency thief got into the npm account of a hard-working developer via spearphishing. node.js packages with billions ...

Hackers planted malicious code in open source software packages with more than 2 billion weekly updates in what is likely to ...

NPM developer qix's account compromise potentially puts user funds at risk by compromising library dependencies used by ...

Binance reassures customers after a massive NPM supply chain attack injects malicious code into 18 popular JavaScript ...

Cybercriminals hacked 18 NPM packages of a well-known developer to conceal malware. The breach affected several leading ...

Less $50 worth of crypto has been stolen from the large-scale JavaScript libraries attack on Monday, which targeted Ethereum ...

Node.js 18 includes an update to the V8 JavaScript engine, global fetch enabled by default, and a core test runner module.

JavaScript’s low bar to entry has resulted in one of the richest programming language ecosystems in the world. This month’s ...

Bun is an ambitious project that is quickly emerging as a drop-in replacement and faster alternative to Node.js. Here's a look at how Bun works and how to use it for your server-side JavaScript ...