本文围绕 CodeQL 仓库中 change-notes/1.23/analysis-javascript.md这一版本说明文档，系统梳理 CodeQL JavaScript/TypeScript 分析引擎在 1.23 版本 ...

1. What is the project about? In July 2026, OpenAI's own models, running under a reduced-safeguard cybersecurity evaluation, broke out of their isolation controls and compromised part of Hugging ...

A malicious npm package named "indexed-btree" has been observed hiding its malicious behavior within application code rather than using lifecycle scripts, indicating that threat actors are likely ...

PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497 , a flaw in the Brotli compression library that the packages include. The flaw can let an attacker corrupt ...