JavaScript

Oh, look: More malware in the Google Play store

in brief Also, US media hit with JavaScript supply chain attack, while half of govt employees use out-of-date mobile OSes

Research07 Nov 2022 | 25

The International Space Station will deorbit in glory. How's your legacy tech doing?

Opinion Your past projects may be a pain, but can they rain fiery death from above?

Columnists30 Aug 2022 | 101

Python tops programming love list – but if you want a job, learn SQL

Don't ask us how this is decided, it probably involved a lot of Perl

Software24 Aug 2022 | 97

Microsoft tightens Edge security for less visited websites

We're pretty sure that doesn't mean it's safe to click on sketchy popups

Security08 Aug 2022 | 13

Node.js prototype pollution is bad for your app environment

Boffins find common code constructs that may be exploitable to achieve remote code execution

Research25 Jul 2022 | 5

Typo-squatting NPM software supply chain attack uncovered

Beawre teh mizpelled pakcage naem

Security06 Jul 2022 | 7

TypeScript joins 5 most used languages in 2022 lineup

Stackoverflow survey: JavaScript still in lead. Plus, you may hate COBOL, but users saw a salary jump

Software22 Jun 2022 | 15

Researchers find 134 flaws in the way Word, PDFs, handle scripts

Black Hat Asia ‘Cooperative mutation’ spots problems that checking code alone will miss

Security13 May 2022 | 27

Anatomy of a campaign to inject JavaScript into compromised WordPress sites

Reverse-engineered code redirects visitors to dodgy corners of the internet

Research13 May 2022 | 8

Emma Sleep Company admits checkout cyber attack

Customers wake to a nightmare as payment data pilfered from UK website

Security04 Apr 2022 | 33

Microsoft Azure developers targeted by 200-plus data-stealing npm packages

Another day, another attack on the software supply chain

Security24 Mar 2022 | 14

JavaScript library updated to wipe files from Russian computers

Package used by big apps now drops anti-war text files on desktops

Devops18 Mar 2022 | 56

Microsoft proposes type syntax for JavaScript

Long overdue innovation or an affront to all that developers hold dear?

Software14 Mar 2022 | 85

This JavaScript scanner hunts down malware in libraries

Stick a fork in this Socket and zap malicious NPM packages

Security01 Mar 2022 | 2

JavaScript survey: Most use React but satisfaction low

What do we want? Static typing!

Software22 Feb 2022 | 73

Worried about occasional npm malware scares? It's more common than you may think

WhiteSource says it spotted 1,300 malicious JavaScript packages in 2021 alone

Security03 Feb 2022 | 15

New York Times outlays seven-figure sum for 1,900 lines of JavaScript – yes, we mean Wordle

Developer overwhelmed by game's runaway success, doesn't oppose future paywall

Software01 Feb 2022 | 86

Hardware boffin starts work on simulation of an entire IBM S/360 Model 50 mainframe

With microcode intact so it can talk to an original operator's console

HPC27 Jan 2022 | 47

Japan's Supreme Court rules cryptojacking scripts are not malware

Coinhive-slinger wins on appeal

Security21 Jan 2022 | 14

Log4j RCE: Emergency patch issued to plug critical auth-free code execution hole in widely used logging utility

Updated Prepare to have a very busy weekend of mitigating and patching

Security10 Dec 2021 | 65

Blogfight! Blogfight! Blogfight! Fastly flames Cloudflare's serverless stats

We're faster than you. No you're not. Are too. No way! Yes way … can someone take this pair to the principal's office?

PaaS + IaaS07 Dec 2021 |

European Cybercrime Centre confident it's kicked credit card crims – again

Poised to reveal similar haul to 2020's €40M loss prevention total

Security02 Dec 2021 | 4

Jamstack research: Typescript and serverless are the winners

Figma dominating Adobe XD in UIs

Off-Prem11 Oct 2021 | 8

JavaScript library downloaded 3m times a week exposes apps to hijacking via evil proxy configs

PAC mania

Devops03 Sep 2021 | 7

Microsoft wonders if disabling just-in-time compilation of JavaScript improves browser security

Edge is getting a 'Super Duper Security Mode' to test the idea. Yes, that is the actual name

Security06 Aug 2021 | 41

Security warning deluge from 'npm audit' is driving developers to distraction

Can we have less infosec theater, please?

Devops09 Jul 2021 | 17

Chrome 'Conformance' for JavaScript frameworks says: If you don't follow our rules, your project won't build

Google knows best

Software17 Jun 2021 | 8

How to use Google's new dependency mapping tool to find security flaws buried in your projects

Millions of Rust, JavaScript, Go, Maven repositories scanned and visualized

Security04 Jun 2021 | 15

Open-source JavaScript project Babel 'running out of money' after employing paid maintainers, sponsors pull out

Creator deletes posts alleging 'mismanagement' to blame

Software12 May 2021 | 24

Report: World's population of developers expands, JavaScript reigns, C# overtakes PHP

Pandemic making permanent changes to developer remote working

Software26 Apr 2021 | 18

Node.js 16 released with Apple Silicon binaries, JavaScript V8 engine turned up to nine

All supported releases will now support ECMAScript modules - but progress on moving away from CommonJS is slow

Software20 Apr 2021 |

The JavaScript ecosystem is 'hopelessly fragmented'... so here is another runtime: Deno is now a company

Would-be Node.js successor gets $5m cash injection

Software06 Apr 2021 | 34

Deno 1.8: Node.js alternative gets 'out of the box GPU accelerated machine learning'

JavaScript could usurp Python for mathematical programming, claims Deno team

AI + ML04 Mar 2021 | 19

A new take on programming trends: You know what's not a bunch of JS? Devs learning Python and Java ahead of JavaScript

O'Reilly's opinionated survey says low-code on the up and modern web dev is 'chilling'

Devops26 Jan 2021 | 27

JavaScript survey: React everywhere, Jest, Webpack on the up... if only it had static typing, sigh developers

The world's favourite language has complex ecosystem in which build tools are now fundamental

Software14 Jan 2021 | 14

React team observes that running everything on the client can be costly, aims to fix it with Server Components

Server-side React solves 'many other problems we have had for a while' says Core developer

Devops07 Jan 2021 | 51

Happy silver jubilee to JavaScript, king of the web at 25 and still hanging on to its crown, for now

Two and a half decades on, JavaScript is everywhere

Software05 Dec 2020 | 64

Malicious backdoored NPM package masqueraded as Twilio library for three days until it was turfed out

Dodgy JavaScript code downloaded hundreds of times

Devops03 Nov 2020 | 5

GitLab scans its customers' source code, finds it's as fragile as you'd expect

Bugs from Lodash and JQuery among the more commonly seen security problems

Devops06 Oct 2020 | 39

And you thought Fuzzilli was a pasta... Google offers up $50k in cloud credits to fuzz the hell out of JavaScript engines

And don't forget the paperwork after, says Chocolate Factory

Security02 Oct 2020 | 8

Not Particularly Mortifying: IEEE eggheads probe npm registry, say JavaScript libs not as insecure as feared

Oh sure, there are plenty of flaws in those packages though not even one in ten are anything to worry about

Devops25 Sep 2020 | 13

At the very last Moment.js: Time-and-date JavaScript library fetched 12 million times a week ends development

Programmers put decade-old package out to pasture, advise devs to find alternatives

Software15 Sep 2020 | 15

Microsoft nudges latest TypeScript iteration out onto the mean streets of JavaScript

Alright! Variadic tuple types

Software20 Aug 2020 | 10

Ew, that's unsanitary: SEO plugin for WordPress would run arbitrary JavaScript inputs instead of scrubbing them

XSS vuln could hijack websites so update your All in One pack

Security17 Jul 2020 | 4

Barclays Bank appeared to be using the Wayback Machine as a 'CDN' for some Javascript

Updated Tight-lipped bank has fixed the weirdness - but not said why it happened

Security03 Jul 2020 | 110

Languishing lodash library loophole finally fitted for a fix: It's only taken since October to address security bug

It's only downloaded 26.5m times a week, NBD

Devops03 Jul 2020 | 5

OOP there it is: You'd think JavaScript's used more by devs than Java... but it's not – JetBrains survey

Interview We're not worried about Microsoft or VS Code, says IDE flinger

Software11 Jun 2020 | 53

Tycoon malware rages through US schools, LG's boot problem, and QNAP admins had better get busy

Also: Cisco and Apple push out patches

OSes08 Jun 2020 | 4

Beyond JAMstack: Next.js creator on hybrid rendering, TypeScript and Visual Studio Code

Interview Guillermo Rauch: 'One of the biggest performance issues that we see today is to do with advertising'

Software19 Mar 2020 | 8

Avast pulls plug on insecure JavaScript engine in its security software suite

Code interpreter ran with admin-level access, not sand-boxed, potentially open to remote-code execution

Security13 Mar 2020 | 6

NBD: A popular HTTP-fetching npm code library used by 48,000 other modules retires, no more updates coming

Downloaded 17m times a week, now coders should consider an alternative

Software12 Feb 2020 | 25

Electron devs bond at Covalence conference: We speak to those mastering the cross-platform tech behind Slack, Visual Studio Code, etc

Analysis Derided app framework ready for broader acceptance

Software27 Jan 2020 | 29

JavaScript survey: Devs love a bit of React, but Angular and Cordova declining. And you're not alone... a chunk of pros also feel JS is 'overly complex'

Tried Svelte yet? Perhaps you should

Software19 Dec 2019 | 75

NPM swats path traversal bug that lets evil packages modify, steal files. That's bad for JavaScript crypto-wallets

Trio of vulnerabilities made registry full of uncertain code even more of a risk

Security13 Dec 2019 | 19

The Wun Show: Douglas Crockford has been sniffing JavaScript's bad parts again

Stob The Good, the Bad, and the Wunderful

Software25 Sep 2019 | 38

Hey, NPM. How do you like your Bogensberger? He's, well, done: CEO Bryan ejects from biz

JavaScript packager seeks new boss amid internal friction, firings, unionization attempts

Devops20 Sep 2019 | 8