Find a story
Search Spins
Search titles, summaries, and missing voices across published articles — press releases, announcements, and media coverage.
19 results for “javascript”
Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports
A security vulnerability in Telegram Desktop allowed malicious bots to inject hidden JavaScript into HTML chat exports, enabling unauthorized exfiltration of message contents when the exported file was opened in a browser.
Sep 15, 2026
JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies
JSCeal is a newly identified, obfuscated V8 JavaScript malware capable of bypassing Google authentication by stealing and reusing session cookies, posing a novel threat to web-based identity verification.
Sep 7, 2026
Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day
Google released an emergency Chrome update to patch a high-severity, actively exploited zero-day vulnerability (CVE-2026-85046) in the V8 JavaScript engine, which could allow remote code execution.
Sep 4, 2026
Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks
Threat actors are exploiting the trusted Node.js runtime (node.exe) to deliver malware in targeted attacks against government departments, technology companies, and hotels since February 2026.
Sep 3, 2026
13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds
Thirteen malicious Composer packages on Packagist were found injecting JavaScript into Vietnamese streaming sites to deploy spyware targeting unpatched iPhones for crypto wallet seed theft, ad fraud, and gambling redirects.
Sep 1, 2026
Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE
A critical sandbox escape vulnerability (GHSA-864f-rcv7-6rh4) was disclosed in isolated-vm, an open-source JavaScript sandbox library used to isolate untrusted code, enabling potential remote code execution on the host system.
Aug 20, 2026
HTML over WebSockets: real-time SPAs with barely any JavaScript
A Hacker News thread titled 'HTML over WebSockets: real-time SPAs with barely any JavaScript' contains user comments discussing a technical approach to building real-time web applications using server-sent HTML via WebSockets instead of client-side JavaScript frameworks.
Aug 13, 2026
CryptoJS Weak RNG Behind $5.7 Million in Drains Affects Five Crypto Wallet Apps
A 12-year-old vulnerability in CryptoJS's random number generator led to $5.7M in cryptocurrency theft from five wallet apps by enabling predictable recovery phrase generation.
Aug 6, 2026
You don't need React: creating a minimal UI library in Vanilla JavaScript
A Hacker News thread discusses building a minimal UI library using Vanilla JavaScript instead of React, reflecting developer interest in lightweight alternatives to mainstream frameworks.
Aug 4, 2026
Hackers Poison Adform Script to Swap Crypto Wallet Addresses Across Customer Sites
Attackers compromised Adform's JavaScript file to silently replace cryptocurrency wallet addresses on customer websites, enabling theft of crypto funds from users who copied addresses during the attack window.
Aug 1, 2026
datasette-agent 0.4a0
Datasette-Agent v0.4a0 introduces a new browser_task() API enabling plugins to execute arbitrary JavaScript in the user's browser context, expanding its LLM tool-use capabilities for web-native automation.
Aug 1, 2026
Scriptc by Vercel: TypeScript-to-Native compiler, no JavaScript engine in binary
A forum thread on Hacker News discusses 'Scriptc', a new TypeScript-to-native compiler announced by Vercel, claiming binaries contain no JavaScript engine.
Jul 27, 2026
Htmx 4.0, the first JavaScript library to release exclusively on the Game Boy
A satirical or fictional announcement claims htmx 4.0 — a real web framework — was released exclusively on the Game Boy, conflating platform constraints with software distribution as absurdist commentary.
Jul 26, 2026
Malicious sites use JavaScript to build malware in browser memory
Cybercriminals are deploying a large-scale malvertising campaign that uses deceptive cryptocurrency and trading platform websites to deliver malicious JavaScript, which constructs malware directly in browser memory without writing files to disk.
Jul 25, 2026
Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flaws
Mozilla issued emergency security patches for two critical Firefox vulnerabilities with publicly available exploit code, posing immediate risk to users.
Jul 15, 2026
Show HN: Ant – A JavaScript runtime and ecosystem
A forum post on Hacker News announces 'Ant', a new JavaScript runtime and ecosystem, with no substantive description, technical details, or context provided.
Jul 12, 2026
Converting colors in JavaScript at 6B operations per second
A Hacker News forum thread discusses a JavaScript color conversion optimization achieving 6 billion operations per second, highlighting technical curiosity and community-driven performance benchmarking in web development.
Published Jul 9, 2026 · Analyzed Jul 13, 2026
Satteri: A Markdown pipeline forged in Rust for the JavaScript world
A forum thread on Hacker News discusses 'Satteri', a Rust-based Markdown processing pipeline intended for JavaScript environments, with no substantive article content beyond the title and 'Comments' label.
Published Jul 7, 2026 · Analyzed Jul 12, 2026
Building a World Map with only 500 bytes
A developer compressed a recognizable ASCII world map into 445 bytes using deflate compression and JavaScript's DecompressionStream API, demonstrating extreme data efficiency in client-side rendering.
Jul 6, 2026