On the JS course I started, I've learned about prototype pollution and paying attention to third-party that may have vulnerabilities by using not so safe JS idioms.