A widely-adopted JavaScript library has been found carrying a critical vulnerability which could allow threat actors to ...

A JavaScript library that scores over two million downloads every week has been injected with malicious code for stealing coins from a cryptocurrency wallet. The affected package is Event-Stream, ...

A critical security vulnerability in the popular JavaScript library expr-eval allows remote code execution. The bug, with a ...

Coinhive is quickly becoming the talk of the Internet, going from an innovative tool that lets you mine Monero with your browser, to a technology abused by hoards of malware authors. Coinhive, as a ...