securityaffairs

JSCeal Hides Crypto Malware in V8 Bytecode

JSCeal hides crypto-stealing malware in V8 bytecode, but researchers built a tool to decompile it and expose its advanced theft capabilities. JSCeal is a cryptocurrency stealer that Check Point ...
Kaseya

Fake voicemails, real malware: Inside a 26,000-email SVG smuggling campaign

A two-month phishing campaign disguised malicious JavaScript as harmless voicemail attachments, mislabeling the files as plain text to slip past attachment scanners. INKY detected and flagged all ...
reversinglabs

31 Red Hat npm packages backdoored by Miasma in 72 seconds

The malicious versions span from 10:54:09 to 10:55:21 UTC — 72 seconds from first to last publish. This is not a human typing at a terminal; it is automated scripted publishing. The attacker prepared ...
reversinglabs

How 56 npm packages used binding.gyp to steal secrets

The popular repository npm's security guidance is clear: audit preinstall and postinstall scripts before installing packages. The attacker behind this campaign read the same guidance — and found a way ...
Security Boulevard

Miasma: Red Hat Cloud Services npm Packages Hit by a Mini Shai-Hulud-Style Campaign

npm install └─ preinstall: node index.js (stage 1, 4.1 MB Caesar wrapper) └─ decoded JS, ~1.2 MB (stage 2, AES-128-GCM unwrap) ├─ payload _b, 898 B (stage ...
note

【JavaScript】文字列操作 半角↔︎全角変換、濁点・半濁点の結合、ひらがな ⇔ カタカナ変換

return str .replace(/[\uFF01-\uFF5E]/g, ch => String.fromCharCode(ch.charCodeAt(0) - 0xFEE0)) // 全角英数字・記号 .replace(/\u3000/g, ' '); // 全角スペースを半角スペースに変換 } else { return str; // 全角文字がなければ元の文字列を返す } } ...
blog.csdn

JavaScript 数据处理 - HEX（十六进制）字符串转换为普通字符串（使用 Buffer、使用 String.fromCharCode、使用 TextDecoder）

本内容遵循CC 4.0 BY-SA版权协议 在这个数字革命的时代，我们将引领您穿越去中心化、智能合约、加密货币以及分布式应用程序的世界。无论您是初学者还是经验丰富的区块链开发者，我们都致力 ...
cybersecuritynews

Threat Actors Compromise 270+ Legitimate Websites With Malicious JavaScript Using JSFireTruck Obfuscation

Cybersecurity researchers have uncovered a sophisticated malware campaign that leveraged an advanced JavaScript obfuscation technique to compromise hundreds of legitimate websites and redirect ...
blog.csdn

JavaScript 字符串 - String 的静态方法（String.fromCharCode()、String.fromCodePoint()、String.raw()）

原创 最新推荐文章于 2026-09-19 17:32:18 发布 · 582 阅读 字符串是前端开发中最基础也最易被误解的数据类型。其本质是不可变的UTF-16编码序列，而非直观的‘字符数组’——这一根本认知偏差导致 ...
cybersecuritynews

New Magecart Attack With Malicious JavaScript Steals Credit Card Data

A sophisticated Magecart attack campaign has been discovered targeting e-commerce platforms, employing heavily obfuscated JavaScript code to harvest sensitive payment information. This latest variant ...