From Bluetooth exploits in vehicles to macOS backdoors and GitHub phishing tricks—this week’s threats go deeper than they appear.

When importing resources using javascript modules Chrome fails to receive and parse the server pushed resources because there is no content-type header for them.