🧰 Node.js

The items that name it 150

• Inside a malicious Claude Code-branded extension and its persistent SSH backdoor
  writeupas classification.technologies2026-10-31
• Trojanized Claude Code Extension Plants an SSH Backdoor
  writeupas classification.technologies2026-10-30
• Backdoor in Claude Code for VS Code extension on the Cursor Marketplace
  writeupas classification.technologies2026-10-30
• Earliest Known PolinRider Malware Found in 2025 npm Packages
  writeupas classification.technologies2026-10-30
• What are shell vulnerabilities? PHP2Shell, Node2Shell (HTTP2Shell), React2Shell and Log4Shell explained
  articleas affected products2026-10-29It is written here as Node.js (unmodified Node.js 24.22.0 image exploited; Node.js 18 and 20 have no vendor fix).

  unmodified Node.js 24.22.0 image exploited; Node.js 18 and 20 have no vendor fix

• A quiet week in infosec <.<
  articleas affected products2026-10-29It is written here as Node.js (affected by the Brotli flaw).

  affected by the Brotli flaw

• The OpenSourceMalware Show #27
  talkas classification.technologies2026-10-29
• Node2Shell: Reproducing CVE-2026-111497 in the Node.js Brotli decoder
  writeupas affected products2026-10-29It is written here as Node.js (bundled Brotli decoder; official image 24.22.0 reproduced vulnerable; fixed in 22.23.4, 24.22.1, 26.12.1; end-of-life release lines vulnerable with no patch).

  bundled Brotli decoder; official image 24.22.0 reproduced vulnerable; fixed in 22.23.4, 24.22.1, 26.12.1; end-of-life release lines vulnerable with no patch

• Trail of Bits (@trailofbits) on X
  threadas classification.technologies2026-10-28
• TLP Is Not a Suggestion
  articleas affected products2026-10-28It is written here as Node.js (Brotli flaw Node2Shell, mentioned only in a related-article blurb).

  Brotli flaw Node2Shell, mentioned only in a related-article blurb

• CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts
  articleas classification.technologies2026-10-28
• Malicious Firefox Extensions Impersonate Phantom, Jupiter, and Bitget to Steal Wallet Secrets
  writeupas classification.technologies2026-10-27
• Node.js Brotli Decoder Out-of-Bounds Write Threatens Remote Code Execution Across All Supported Versions
  advisoryas classification.technologies2026-10-27
• eMudhra, Brotli, and the Long Tail of a Security Fix
  articleas classification.technologies2026-10-26
• Masoud (@dev3mike) on X
  threadas classification.technologies2026-10-26
• Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
  articleas affected products2026-10-26It is written here as Node.js (official Node.js 24.22.0 image for Linux arm64 shown exploitable by Imperva; patched last week).

  official Node.js 24.22.0 image for Linux arm64 shown exploitable by Imperva; patched last week

• Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability
  advisoryas affected products2026-10-25It is written here as Node.js (unpatched environments; end-of-life runtime branches should be migrated to supported versions).

  unpatched environments; end-of-life runtime branches should be migrated to supported versions

• Bye Bye Brotli? Google's Compression Library Is a Security Mess
  articleas classification.technologies2026-10-25
• lee1981 (@lee1981b) on X
  articleas classification.technologies2026-10-25
• Brotlipocalypse
  writeupas affected products2026-10-24It is written here as Node.js (fixed in 22.23.4, 24.22.1, 26.12.1).

  fixed in 22.23.4, 24.22.1, 26.12.1

• OVHcloud CLI Compromised via GitHub Release Swap: Detonating the Real GlassWorm Loader and What We Found
  writeupas classification.technologies2026-10-24
• AI Quanting (@AIQuanting) on X
  threadas classification.technologies2026-10-24
• Everything, everywhere, all at once… the week software broke | Endor Labs
  articleas classification.technologies2026-10-24
• Trail of Bits (@trailofbits) on X
  toolas classification.technologies2026-10-23
• Python packages are also vulnerable to the Node2Shell Brotli flaw (CVE-2026-111497)
  advisoryas affected products2026-10-23It is written here as Node.js (Node2Shell; patched versions released October 21, 2026; researchers exploited an unmodified Node.js 24.22.0 build).

  Node2Shell; patched versions released October 21, 2026; researchers exploited an unmodified Node.js 24.22.0 build

• lee1981 (@lee1981b) on X
  advisoryas classification.technologies2026-10-23
• Python Packages Vulnerable to Node2Shell
  writeupas classification.technologies2026-10-23
• Node2Shell: Node.js Brotli vulnerability allows remote code execution (CVE-2026-111497)
  advisoryas classification.technologies2026-10-22
• Paul Dragoonis (@dr4goonis) on X
  threadas affected products2026-10-22It is written here as Node.js (4 High-severity vulnerabilities; fixed in 22.23.4, 24.22.1, 26.12.1).

  4 High-severity vulnerabilities; fixed in 22.23.4, 24.22.1, 26.12.1

• Amazon-Themed ClickFix Campaign Serves Up Finger-Licking Malware
  writeupas classification.technologies2026-10-21
• A company that vouches for websites had secret keys so weak that 8 of them were cracked
  articleas classification.technologies2026-10-21
• Glassworm Hacks OVH Clouds CLI tool
  writeupas classification.technologies2026-10-19
• Putting models to the secure coding test: Security rules
  writeupas classification.technologies2026-10-19
• GhostAction Copycats PolinRider by Hiding a Stealer in a Fake Font File
  writeupas classification.technologies2026-10-16
• Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant
  writeupas tools2026-10-14It is written here as Node.js (/bin/node).

  Mapped to MDChallengeDns01 so the Apache ACME challenge executes attacker commands.

• Artificial Intelligence (AI) in Cybersecurity, Part 29: Creating Isolated Autonomous Agents for Hacking with NemoClaw
  articleas classification.technologies2026-10-14
• 44er (@44errrr) on X
  toolas classification.technologies2026-10-14
• Field Notes: EtherRAT Distributed Through a Legitimate Intune Workflow
  writeupas classification.technologies2026-10-13
• Happier DOMs: The perils of running untrusted JavaScript code outside of a web browser | Blog | Endor Labs
  writeupas classification.technologies2026-10-12
• Nicholas Michael Kloster (@showxlate) on X
  threadas classification.technologies2026-10-12
• Dan Kornas (@DanKornas) on X
  repoas classification.technologies2026-10-11
• Malicious npm Campaign “MALFEX” Delivers RAT and Stealer via Eight Packages with 40,000+ Downloads
  articleas classification.technologies2026-10-08
• Tensorlake npm package compromised by Shai-Hulud in latest software supply chain attack | Blog | Endor Labs
  advisoryas classification.technologies2026-10-08
• 3 lessons from frontier AI vulnerability research
  writeupas affected products2026-10-07It is written here as Node.js (CVE-2026-56848).

  CVE-2026-56848

• MALFEX npm Malware Campaign: Three Payloads And An Adversary That Signs Their Work
  writeupas classification.technologies2026-10-05
• SubQuery Ecosystem Compromise: Hidden Credential Theft and Backdoors
  writeupas classification.technologies2026-10-05
• Pretty Themes, Hidden Loaders: GlassWorm-Linked Extensions Span VS Code Marketplace and Open VSX
  writeupas classification.technologies2026-10-02
• MALFEX npm Attack Spreads Windows RAT, Steals Discord and Browser Data
  articleas classification.technologies2026-09-30
• CVE-2026-61500: Rejetto HFS Session Forgery Vulnerability (found via Anthropic Mythos)
  writeupas classification.technologies2026-09-30
• upm Launches as a Fast, Tiny Package Manager Written in TypeScript
  articleas classification.technologies2026-09-29
• PolinRider is A/B Testing its Way Past Your Detections
  writeupas classification.technologies2026-09-26
• Socket Joins New OpenJS Program to Fund Node.js Security Work
  articleas affected products2026-09-25

  Focus of the Security Stewardship Program's initial funding for vulnerability research, triage, patching, and security releases

• Socket: Two Joyfill npm Beta Releases Compromised to Deliver DEV#POPPER Remote Access Trojan
  writeupas classification.technologies2026-09-20
• PolinRider Spreads Through Compromised GitHub Accounts and Packagist
  articleas classification.technologies2026-09-17
• WeaselBiscuit Strips BeaverTail and OtterCookie Down to Essentials
  writeupas classification.technologies2026-09-17
• y0usaf/pi-jev
  repoas classification.technologies2026-09-16
• Cloudflare security-audit-skill
  repoas classification.technologies2026-09-15
• OpenHunterAI
  repoas classification.technologies2026-09-15
• Dependabot vs Renovate
  articleas affected products2026-09-14It is written here as Node.js (affected by CVE-2026-48937).

  affected by CVE-2026-48937

• Shai-Hulud 2 Malware Campaign Targets GitHub and Cloud Credentials Using Bun Runtime | Blog | Endor Labs
  writeupas classification.technologies2026-09-11
• CassiopeiaCode/CosyRedactGateway
  repoas classification.technologies2026-09-11
• Passkey-themed social engineering leads to identity and cloud compromise
  writeupas tools2026-09-09

  Used by the threat actor to build an automated system with Microsoft Graph for credential reuse and reconnaissance (attacker tooling, not a defensive tool).

• The dark figure of supply chain detection
  articleas classification.technologies2026-09-01
• Popular code generator for TanStack Query hit by supply chain worm
  writeupas classification.technologies2026-08-28
• Securing Docker images
  articleas classification.technologies2026-08-28
• UI-TARS-desktop MCP Server: Critical Unauthenticated RCE
  advisoryas classification.technologies2026-08-27
• S1N6H/pentest-harness
  repoas classification.technologies2026-08-27
• NPM Isn't Prepared For North Korean PolinRider Attack
  writeupas classification.technologies2026-08-25
• agentgg
  repoas classification.technologies2026-08-23
• What is CVE remediation in 2026?
  articleas affected products2026-08-21

  Fix for CVE-2026-48937 shipped bundled with a SEMVER-MAJOR update to the nghttp2 dependency, removing HTTP/2 priority signaling entirely.

• AI Development and Agentic Security Labs
  courseas classification.technologies2026-08-21
• We discovered a critical vulnerability in isolated-vm a sandbox that is widely used in popular AI-related projects | Blog | Endor Labs
  advisoryas classification.technologies2026-08-20
• How JavaScript Sandboxes Work | Blog | Endor Labs
  articleas classification.technologies2026-08-20
• Putting models to the secure coding test: Plan vs default mode
  articleas classification.technologies2026-08-19
• Why NPM Malware Keeps Reaching for Bun | Supply Chain Security | Blog | Endor Labs
  articleas affected products2026-08-12It is written here as Node.js (npm install lifecycle script execution is the underlying attack surface).

  npm install lifecycle script execution is the underlying attack surface

• UIUCTF 2026 — Firefly & Sparxie: Lua Sandbox Escape via Bytecode Patching and WASM UAF
  writeupas affected products2026-08-11
• AuditSentry
  repoas classification.technologies2026-08-10
• What is AI harness engineering?
  articleas classification.technologies2026-08-06
• Keyv and friends compromised in active Shai-Hulud supply chain attack
  advisoryas classification.technologies2026-08-04
• Kritt-ai/open-kritt
  repoas classification.technologies2026-08-02
• NullReceiver's Blank Crypto Transfers Solves the Challenges of EtherHiding
  writeupas classification.technologies2026-08-02
• Codex Security CLI
  repoas affected products2026-08-01

  required runtime for Codex Security CLI

• Compromised npm Packages: @joyfill/components and @joyfill/layouts Ship an Obfuscated Remote Access Trojan
  writeupas classification.technologies2026-07-30
• Claude as Autonomous Bug Bounty Hunter
  articleas affected products2026-07-30
• Socket: Distributed npm Package Cluster Delivers Cross-Platform RAT Targeting Alibaba Developers
  writeupas classification.technologies2026-07-29
• Socket: Fake Corepack Site Distributes Infostealer and Proxyware to Developers
  writeupas affected products2026-07-25

  JavaScript runtime whose Technical Steering Committee voted in 2025 to stop distributing Corepack with future releases

• Finding eight high-severity vulnerabilities in NodeBB in six hours
  writeupas classification.technologies2026-07-22
• The upgrade trap: when upgrading is the wrong answer to a CVE
  articleas affected products2026-07-22

  Fix bundled with SEMVER-MAJOR nghttp2 update and removal of HTTP/2 priority signaling; users had to grep for setPriority and .priority() and remove them before upgrading

• AWS Kiro RCE: Prompt Injection to Code Execution | Kodem
  writeupas tools2026-07-19

  Used to build the PoC malicious server (simple-malicious-server.js) serving the poisoned documentation page and the callback listener, and as the command run by the malicious 'telemetry' MCP server

• Coordinated AsyncAPI Supply Chain Attack: Miasma RAT Delivered via Compromised CI/CD Pipelines in Two Repositories
  writeupas classification.technologies2026-07-16
• Socket: pnpm 11.10 Hardens Registry Authentication to Block Token Redirection
  articleas classification.technologies2026-07-16
• Socket: Coordinated npm/PyPI Campaign Typosquats Paysafe, Skrill, Neteller Payment SDKs
  writeupas classification.technologies2026-07-16
• brain0
  repoas classification.technologies2026-07-15
• Socket: npm v12 Ships With Install Scripts Off by Default
  articleas affected products2026-07-15

  npm may backport v12 defaults to these active LTS lines, pending Node release team approval

• AsyncAPI npm packages backdoored via GitHub Actions
  writeupas classification.technologies2026-07-14
• LocxZ/SecureSDLC-Lab
  repoas classification.technologies2026-07-14
• Injective npm Supply Chain Attack: 18 Packages Backdoored to Steal Crypto Wallet Keys
  writeupas classification.technologies2026-07-12
• The Bitwarden CLI Supply Chain Attack: What Happened and What to Do | Blog | Endor Labs
  writeupas classification.technologies2026-07-10
• Cybersecurity Startup Publishes Infostealers to NPM
  writeupas classification.technologies2026-07-09
• Compromised @injectivelabs/sdk-ts exfiltrates wallet keys through fake telemetry
  writeupas classification.technologies2026-07-09
• Socket: Node.js Eyes Public Disclosure for AI-Flooded Security Reports
  articleas affected products2026-07-08

  security report intake and vulnerability disclosure process under discussion

• One Request to Own Every Repo: How We Hijacked GitLab Through Its MCP Server - Pluto Security
  writeupas classification.technologies2026-07-06
• JFrog: Where CVE Severity Scores Go Wrong
  writeupas classification.technologies2026-07-01
• codfish/semantic-release-action GitHub Action has been compromised
  writeupas classification.technologies2026-07-01
• XORCISM-AI/XORCISM
  repoas affected products2026-07-01

  Break the better-sqlite3 native module ABI; platform requires Node 20 (prebuilt binaries)

• Teycir/SkillsGuard
  repoas affected products2026-06-21

  Minimum runtime requirement to run SkillsGuard.

• Socket: 141 Mastra npm Packages Compromised via Typosquatted Dependency
  writeupas classification.technologies2026-06-20
• Mastra npm Supply Chain Attack: 140+ Packages Backdoored via easy-day-js Typosquat
  writeupas classification.technologies2026-06-18
• Mastra Attack Targets Crypto, Password Managers, Authenticators, and Zapier
  writeupas classification.technologies2026-06-18
• Socket: npm Package Uses Prompt Injection + Token Flooding to Evade AI Malware Scanners
  writeupas classification.technologies2026-06-17
• A Forgotten Contributor Account Compromised the Entire Mastra npm Package Scope
  writeupas classification.technologies2026-06-16
• Potemkin Loader & RMMProject The Anatomy of a ClickFix Attack
  writeupas classification.technologies2026-06-16
• Socket: GlassWASM
  writeupas affected products2026-06-16

  JavaScript host runtime required to execute the WASM payload via wasm_exec.js glue and to perform network/process operations via syscall/js bridge and child_process.

• VICE
  repoas affected products2026-06-14

  required to run VICE; must upgrade Node before updating VICE

• npm v12 delivers one of the biggest security improvements in years
  articleas classification.technologies2026-06-11
• Wait, binding.gyp Can Do What? Exploring npm's Weirdest Build System
  writeupas classification.technologies2026-06-09
• Node-gyp Supply Chain Compromise: A Self-Propagating npm Worm That Hides in binding.gyp
  writeupas classification.technologies2026-06-04
• Orca Security: Critical RCE in LiquidJS (CVE-2026-45618)
  advisoryas classification.technologies2026-06-02
• Socket: Famous Chollima Targets PHP Developers via Compromised Packagist Package
  writeupas classification.technologies2026-06-01
• Miasma supply chain attack: malicious code found in @redhat-cloud-services npm packages
  writeupas classification.technologies2026-06-01
• Socket: node-ipc npm Package Compromised
  writeupas classification.technologies2026-05-30
• KeygraphHQ/shannon
  repoas classification.technologies2026-05-23
• Socket: Malicious Postinstall Hook Compromises 8 PHP/Node Packages on Packagist
  writeupas classification.technologies2026-05-23
• Second Time, Same Sandbox: Another Anthropic Claude Code Network Sandbox Bypass Enables Data Exfiltration
  writeupas classification.technologies2026-05-20
• VSCode Lifecycle Script Malware
  writeupas classification.technologies2026-05-16
• GigaChad GRC
  repoas classification.technologies2026-05-13
• Mirage
  repoas classification.technologies2026-05-08
• SanMuzZzZz/LuaN1aoAgent
  repoas classification.technologies2026-05-08
• Socket: Critical vm2 Sandbox Escape
  advisoryas affected products2026-05-08

  runtime condition required for the exploit

• Socket: pnpm 11 Adds Supply Chain Protection Defaults
  articleas affected products2026-05-07

  No longer supported by pnpm 11, which now requires Node.js 22.

• DefenseClaw
  repoas classification.technologies2026-05-07
• IronCurtain: Secure AI Agent Runtime
  repoas affected products2026-05-07
• GigaChad GRC
  repoas classification.technologies2026-05-06
• TanStack npm Brand-Squat
  writeupas classification.technologies2026-05-06
• OpenClaw MAESTRO
  writeupas affected products2026-05-06

  Runtime used by OpenClaw (package.json); may have known dependency CVEs per DI-005

• microsoft/AntiSSRF
  repoas classification.technologies2026-05-06
• Negative Days in LLM Workflows
  writeupas classification.technologies2026-05-05
• Anatomy of an Automated Patch: Fixing a File Upload RCE CVE-2025-59304 | depthfirst
  writeupas classification.technologies2025-11-06
• Weekly Research Brief: PHP Vulnerability; Objections to OKX-ICE’s Stock Tokenization; Solana Alpenglow Ships
  articleas affected productsIt is written here as Node.js: patches released during the week.
• bilawalsidhu/gods-eye-view
  repoas classification.technologies
• microsoft/mxc
  repoas classification.technologies
• Active Supply Chain Attack: Malicious node-ipc Versions Published to npm
  writeupas classification.technologies
• openrig — multi-agent Claude Code/Codex orchestration
  repoas affected products

  Versions 20, 22 or 24 required; on Mac with Apple silicon use Node.js 22

• Sandyaa — open-source autonomous code auditor that proves bugs with working exploit PoCs
  repoas classification.technologies
• CVE-2026-19978: A flaw has been found in jiantao88 android-mcp-server up to cfb872b2446794193b58edd63f4dbf6af48a6292
  advisoryas classification.technologies
• Flowise MCP Security Bypass Enables RCE
  advisoryas classification.technologies
• CVE-2026-44895 - GitHub Advisory Database
  advisoryas classification.technologies
• Lonkero — Rust web vulnerability scanner (v3.7, AI agent mode)
  repoas affected products

  Command injection scanner fixed to account for child_process shell execution capability

• Compromised npm Packages in the AsyncAPI Namespace Deliver Miasma Botnet Loader
  writeupas classification.technologies
• cyanheads/osv-advisory-mcp-server
  repoas classification.technologies

In every workspace you can read 236