Overview
News
Technologies
Salaries
Products
People
Growth
Financials
Overview
Blog. Block-based programming language. JIT compiler runs 100x faster than Scratch. Cross-platform desktop app using Electron. Extensive custom extensions ecosystem including 1400+ new blocks in curated extension gallery. Packager converts projects to HTML or app for Windows/macOS/Linux.
News
Every version of Scratch is vulnerable to arbitrary code execution
Update May 21, 2026: The vulnerability was fixed on the website a bit ago. They also released v3.32.0 of Scratch Desktop, which is intended to fix this bug. Update May 6, 2026: Scratch expanded their server-side filtering to hopefully prevent uploading ne
Read more
Report
The woes of sanitizing SVGs
Scratch has a long history of SVG-related vulnerabilities. The source of these is that Scratch parses user-generated (ie. attacker-controlled) content into an svg element and appends it into the main document for various operations (eg. measuring SVG boun
Read more
Report
The Blocklive malware incident (2024)
This was a somewhat big deal in some Scratch community bubbles in May 2024, but there's very little documentation about it on the open internet. Felt reasonable to put something on this blog about that time Blocklive became malware. I'm also including som
Read more
Report
Paper.js XSS
This blog post discloses a critical security vulnerability in Paper.js - a popular JavaScript library for rendering and manipulating vector images. Responsible disclosure Emails to the only Paper.js maintainer with any online activity were ignored for ove
Read more
Report
Migadu email review
blockquote { border-left: 4px solid gray; padding-left: 12px; } I've been a customer of Migadu email for over two years. I do not recommend Migadu and intend to move to a competing service in the near future. My needs I use Migadu as an individual. My per
Read more
Report
Pro access
Upgrade to see all 7 mentions
Upgrade to a paid plan to read every media mention of this company - funding news, awards, product launches and press releases from all the outlets writing about it.
Every media mention and press release
Funding news, awards and product launches
Fresh coverage from every outlet writing about the company
Upgrade now
Cancel anytime. Secure checkout. Instant activation.