Axios 1.14.1 and 0.30.4 injected malicious [email protected] after npm compromise on March 31, 2026, deploying ...
The bug was assigned CVE-2025-2135, and we successfully used it to pwn Google’s V8CTF as a zero-day. The root cause lies in TurboFan’s InferMapsUnsafe() function, which fails to handle aliasing when ...
Discover 7 enterprise infrastructure tools that reduce engineering workload, speed deployment, and eliminate months of manual ...
Securing dynamic AI agent code execution requires true workload isolation—a challenge Cloudflare’s new API was built to solve ...