Every Node.js project accumulates vulnerable dependencies. The npm registry holds over 2.5 million packages, and researchers found 454,000 malicious or vulnerable packages uploaded in 2025 alone.

All flights in the United States are grounded until further notice “due to extraordinary circumstances and for reasons of safety,” the Federal Aviation Administration said in a statement.