Blocking install scripts closes one route for malicious npm packages. The malicious indexed-btree package shows why ...
OpenAI Codex Security researchers reported CVE-2026-111497, a Brotli decoder flaw that prompted patches for Node.js 22.x, ...