A new proof-of-concept attack shows that malicious Model Context Protocol servers can inject JavaScript into Cursor’s browser ...
A widely-adopted JavaScript library has been found carrying a critical vulnerability which could allow threat actors to ...
A critical security vulnerability in the popular JavaScript library expr-eval allows remote code execution. The bug, with a ...
A critical vulnerability in the popular expr-eval JavaScript library, with over 800,000 weekly downloads on NPM, can be ...
The GlassWorm malware campaign, which impacted the OpenVSX and Visual Studio Code marketplaces last month, has returned with ...
What if AI-assisted development is less of a threat, and more of a jetpack? This month’s report tackles vibe coding, along ...