The Hacker News

CERT/CC Warns binary-parser Bug Allows Node.js Privilege-Level Code Execution

A flaw in the binary-parser npm package before version 2.3.0 lets attackers execute arbitrary JavaScript via unsanitized ...
How-To Geek on MSN

The hidden dangers of downloading GitHub projects: How to stay safe

Downloading apps from GitHub isn’t inherently dangerous, but doing so blindly is. Treat every repository as untrusted until ...