Supply-chain attack using invisible code hits GitHub and other repositories

Researchers say they’ve discovered a supply-chain attack flooding repositories with malicious packages that contain invisible code, a technique that’s flummoxing traditional defenses designed to ...

ThreatDown Uncovers First Cyber Attack Abusing Deno JavaScript Runtime for Fileless Malware Delivery

ThreatDown, the corporate business unit of Malwarebytes, today published research documenting what researchers believe to be ...
InfoWorld

WinterTC: Write once, run anywhere (for real this time)

The unified JavaScript runtime standard is an idea whose time has come. Here’s an inside look at the movement for server-side JavaScript interoperability. The WinterCG community group was recently ...
GitHub

A fast JavaScript runtime, package manager, bundler, and test runner — all in one binary.

Pun runs JavaScript and TypeScript natively, installs dependencies, builds production bundles, and runs tests without configuration. Built in Rust for speed and reliability.