Seemingly harmless SVGs are packed with malicious JavaScript for a phishing redirect to actor-controlled URLs.

The malicious code is hidden within a CDATA section of the SVG file and relies on a static XOR key to decrypt a payload at ...

Another interesting new concept in ES6 called Modules is something that JavaScript developers have been using for years. Some projects, like Webpack , let you take advantage of modularization now.