A developer-targeting campaign leveraged malicious Next.js repositories to trigger a covert RCE-to-C2 chain through standard ...
Static analyser for JavaScript which can detect use of unsafe jQuery methods which are vulnerable to XSS attack. By design, any jQuery constructor or method that accepts an HTML string — jQuery(), ...
TAJS is a dataflow analysis for JavaScript that infers type information and call graphs. The current version of the analysis contains a model of ECMAScript 3rd edition, including the standard library, ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results