Critical flaw patched in popular JavaScript sandbox used in AI projects
CSO Online 168 views
Topic timeline
Javascript
How reporting on this topic developed over time — coverage by day, outlet counts, and multi-source storylines where they exist.
Coverage evolution
How reporting on this topic developed
- Tracked since
- Mar 19
- Latest update
- Sep 9
- Outlets
- 9
- Stories
- 47
Coverage milestones derived from tracked reporting — how many outlets reported and when, not verified real-world events.
-
First detected
Coverage first appeared in the tracked window.
Schneider Electric Modicon Controllers M241, M251, M258, and LMC058 cisa.gov · Mar 19, 2026 -
Coverage expanded
Coverage expanded across 5 independent news outlets.
Expired domain leads to supply chain attack on node-ipc npm package CSO Online · May 15, 2026 -
Current status
Now classified as Developing.
-
Latest update
Most recent tracked report from The Register.
Security boffin claims airport group left API keys in client-side JavaScript for four years The Register · 2h ago
Aug 20, 2026
3 reports 2 outlets — CSO Online, The Hacker News
Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE
The Hacker News 91 views
Other reports
44 reports on days without concentrated coverage, newest first.
