A couple of days ago I googled "how secure is node.js". You can see the results, which imo are not reassuring.
By coincidence, iirc, within a few hours I stumbled upon
deno. It's by the same person who created node, it's written in rust, and it's supposed to be a more secure version of node.