tl;dr Untrusted data passed into unserialize() function  in node-serialize module can be exploited to achieve arbitrary code execution by passing a serialized JavaScript Object with an Immediately invoked function expression (IIFE). The Bug During a Node. (more…)

Behrooz Kamali takes an in-depth look at elasticsearch — a scalable, high-performance search engine — demonstrating how to integrate it into a Node project. (more…)

We're a team of designers, developers, problem solvers and friends based out of San Francisco. (more…)

It’s 2017 and one of your New Year’s resolutions is contributing back to the Node.js project. So, where do you get started?

hostile - Simple, programmatic `/etc/hosts` manipulation (in node.js)... (more…)