nodejs

Node.js Patches 11 Vulnerabilities in July 2026 Security Release

• Vulnerability Report

Node.js Patches 11 Vulnerabilities in July 2026 Security Release

Do Son July 29, 2026 0

TL;DR Node.js shipped fixes for 11 vulnerabilities on 29 July 2026. Three are rated high severity, and...

Read More Read more about Node.js Patches 11 Vulnerabilities in July 2026 Security Release

TONResolver Malware Hides Its C2 in the TON Blockchain to Hit Hotel Partners

• Malware

TONResolver Malware Hides Its C2 in the TON Blockchain to Hit Hotel Partners

Do Son July 2, 2026 0

At a glance Malware TONResolver (RAT; also tracked as TonRAT by Microsoft; detected as TrojanSpy.JS.TONRESOLVER.A) Threat actor...

Read More Read more about TONResolver Malware Hides Its C2 in the TON Blockchain to Hit Hotel Partners

Hospitality Malware Campaign Deploys Node.js Implant

• Cybercriminals

Hospitality Malware Campaign Deploys Node.js Implant

Do Son June 30, 2026 0

At a glance Actor: Unknown threat actor Activity type: Phishing and multi-stage intrusion Targets: Hospitality and hotel...

Read More Read more about Hospitality Malware Campaign Deploys Node.js Implant

Four undici Vulnerabilities Affect a Package With 133M Weekly Downloads

• Vulnerability Report

Four undici Vulnerabilities Affect a Package With 133M Weekly Downloads

Do Son June 22, 2026 0

TL;DR Maintainers have disclosed four undici vulnerabilities in the widely used Node.js HTTP client. The package draws...

Read More Read more about Four undici Vulnerabilities Affect a Package With 133M Weekly Downloads

Node.js Security Updates: Urgent Action Required

• Vulnerability Report

Node.js Security Updates: Urgent Action Required

Do Son June 18, 2026 0

Critical Node.js Security Updates Released Developers must quickly apply the newest Node.js security updates. The Node.js project...

Read More Read more about Node.js Security Updates: Urgent Action Required

NOVABLIGHT: New NodeJS Infostealer-as-a-Service Unmasked, Fueled by Fake Games & Disguised as “Educational”

• Malware

NOVABLIGHT: New NodeJS Infostealer-as-a-Service Unmasked, Fueled by Fake Games & Disguised as “Educational”

Do Son July 31, 2025 0

Elastic Security Labs has exposed the inner workings of NOVABLIGHT, a highly modular, NodeJS-based Malware-as-a-Service (MaaS) information...

Read More Read more about NOVABLIGHT: New NodeJS Infostealer-as-a-Service Unmasked, Fueled by Fake Games & Disguised as “Educational”

Mocha Manakin: New Threat Group Uses “Paste and Run” to Deploy Custom NodeJS RAT!

• Malware

Mocha Manakin: New Threat Group Uses “Paste and Run” to Deploy Custom NodeJS RAT!

Do Son June 23, 2025 0

Red Canary has unveiled a new adversary cluster it’s been tracking since early 2025: Mocha Manakin. Named...

Read More Read more about Mocha Manakin: New Threat Group Uses “Paste and Run” to Deploy Custom NodeJS RAT!

CVE-2024-27980: Critical Node.js Update Patches Windows Command Injection Flaw

• Vulnerability

CVE-2024-27980: Critical Node.js Update Patches Windows Command Injection Flaw

Do Son April 10, 2024 0

The Node.js project has released an urgent security update addressing a critical command injection vulnerability (CVE-2024-27980) on...

Read More Read more about CVE-2024-27980: Critical Node.js Update Patches Windows Command Injection Flaw

Update Beware! “Coyote” Trojan Uses Disguise to Infiltrate Brazilian Banks

• Malware

Update Beware! “Coyote” Trojan Uses Disguise to Infiltrate Brazilian Banks

Do Son February 8, 2024 0

Recently, researchers at Kaspersky Labs uncovered a new breed of banking Trojans dubbed “Coyote.” Unlike its predecessors,...

Read More Read more about Update Beware! “Coyote” Trojan Uses Disguise to Infiltrate Brazilian Banks