# \#javascript

**URL:** https://taggartinstitute.org/tag/javascript/112.md

[Latest](https://taggartinstitute.org/latest.md) · [Categories](https://taggartinstitute.org/categories.md) · [Tags](https://taggartinstitute.org/tags.md)

---

## [Node Modules Hijacking](https://taggartinstitute.org/t/node-modules-hijacking/563)

<div class="topic-metadata">

**Author:** [@mttaggart](https://taggartinstitute.org/u/mttaggart)\
**Replies:** 1\
**Last updated:** [April 11, 2026, 10:45pm UTC](https://taggartinstitute.org/t/node-modules-hijacking/563 "2026-04-11T22:45:40Z")

</div>

Not new exactly, but an important conversation. If you consider DLL hijacking to be a concern, so is this—except worse in some ways because I guarantee your EDR isn’t watching JavaScript applications like it watches DLL…