A critical isolated-vm flaw lets untrusted JavaScript escape the V8 sandbox and potentially hijack the host process.

A critical vulnerability in the Node.js sandboxing library, isolated-vm, has exposed a serious risk to AI agents, automation ...

Hackers hide Agent Tesla malware in Unicode emojis inside fake bank emails, tricking finance teams into opening malicious ...

The type confusion bug can lead to V8 sandbox escape and control-flow hijacking of the host process. A critical-severity type ...

Isolated-vm's ExternalCopy type confusion lets sandboxed code corrupt host memory and potentially reach host RCE; fixes are ...

Microsoft Threat Intelligence identified a large-scale npm supply chain attack affecting more than 400 packages across multiple unrelated publishers, including packages associated with major ...