Six Proto6 flaws in protobuf.js enable RCE and DoS attacks; patched in versions 7.5.6 and 8.0.2 to protect Node.js services.

Mastra AI’s 144 JavaScript packages was executed in just 88 minutes by North Korea’s Sapphire Sleet hacking group, which ...

Load the Google Maps JavaScript API script dynamically. This is an npm version of the Dynamic Library Import script. Sets the options for loading the Google Maps JavaScript API and installs the global ...

A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend ...

A researcher claims an AI-assisted pipeline helped earn $500,000 in Google bug bounty payouts, raising API security and ...

Google expands AI live speech translation with Gemini 3.5 Live Translate across Google Meet, Google Translate, and its API.

Google is reportedly offering to pay select Android developers for source-code access. Here’s what Play Store developers should check before signing.

Google has released emergency updates to patch another Chrome zero-day vulnerability that has been exploited in the wild, the ...

A coalition including Google, Microsoft, and GitHub published Agentic Resource Discovery, an open draft spec for how AI ...

AI coding agent skills library claude-skills ships 345 free, MIT-licensed packages for Claude Code, Codex, Cursor, Gemini CLI ...

Ky 2.0 is an open-source JavaScript HTTP client built on the Fetch API, featuring significant updates such as consolidated ...