Node.js fixes 10 flaws, including a Brotli decoder bug that may allow code execution when apps decompress attacker-controlled ...
Commenters on Lobsters ask what developers plan for the weekend, revealing maintenance marathons, new builds, and growing ...
Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
A planted AGENTS.md file tricked OpenAI’s Codex into installing malware, exposing a risk for AI coding agents that act on ...
A malicious version of the Claude Code extension reportedly contained hidden code capable of opening remote access to ...
Draw Things released Local Code, an open-source AI assistant for Mac, in a post dated October 28, 2026. MacRumors reported on ...
I can easily differentiate between my projects now.
Hackers planted malware in 42 GitHub repositories, exploiting AI coding tools like Claude, Gemini, Cursor, and VS Code ...
Google Modern Web Guidance helps AI coding agents follow modern web standards for accessibility, performance, security and ...
A newly disclosed flaw in Node.js, software that runs the back end of many websites, could let attackers seize servers ...
The HTTP2Shell vulnerability in Google's Brotli library threatens Node.js and other software with memory corruption and code ...
Node.js 26.12.1, 24.22.1 and 22.23.4 fix TLS verification bypasses, a Brotli decoder bug and a repeated-random-value issue in ...