Zum Hauptinhalt springen
tsecurity.de LIVE
Echtzeit-Radar & Feeds
Alle RSS Feeds
👥 Community & Social
IT Security ToolsGitHub Release: google/clusterfuzz v2.41.2 (24.09.2026)(24.09.2026 um 14:57 Uhr)
IT Security NachrichtenNew Browser Guard features add protection before and after you click(24.09.2026 um 14:45 Uhr)
IT Security NachrichtenMeta brings Private Processing privacy protections to AI glasses(24.09.2026 um 14:44 Uhr)
IT Security NachrichtenTesla FSD Fails Belgian Safety Tests(24.09.2026 um 14:56 Uhr)
Sicherheitslücken (CVE)CISA Charts New "Quality Era" for Global CVE Program(24.09.2026 um 14:50 Uhr)
IT Security NachrichtenThe cost of intelligence?(24.09.2026 um 15:00 Uhr)
IT Security ToolsGitHub Release: google/clusterfuzz v2.41.2 (24.09.2026)(24.09.2026 um 14:57 Uhr)
IT Security NachrichtenNew Browser Guard features add protection before and after you click(24.09.2026 um 14:45 Uhr)
IT Security NachrichtenMeta brings Private Processing privacy protections to AI glasses(24.09.2026 um 14:44 Uhr)
IT Security NachrichtenTesla FSD Fails Belgian Safety Tests(24.09.2026 um 14:56 Uhr)
Sicherheitslücken (CVE)CISA Charts New "Quality Era" for Global CVE Program(24.09.2026 um 14:50 Uhr)
IT Security NachrichtenThe cost of intelligence?(24.09.2026 um 15:00 Uhr)
Intelligence View
⚡ tsecurity.de Intelligence

I finished 6 JavaScript games… and decided to sell them (with full source code)

For a long time I had multiple small game projects sitting around at like 70–80% done. You probably know this situation where the core idea works, gameplay is there, but polish, fixes, and "final push" never happens ... And since I have s…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

For a long time I had multiple small game projects sitting around at like 70–80% done.



You probably know this situation where the core idea works, gameplay is there, but polish, fixes, and "final push" never happens ...

And since I have some times on my hands I said ok… let`s finish them and if I still finish them anyway… why not also sell the source code?

So that’s what I did.






Why no frameworks?



One important rule I gave myself from the start: Everything must be written in pure Vanilla JS. No frameworks.



Yes, I know — using a framework would make some things easier: asset loading or state management or rendering helpers.

But the goal here was different.

I wanted to prove (mostly to myself) that you can build full games in the browser with your own mini-engine, no dependencies.

The only APIs I used: Web Audio API (for sound) and TSS (only in one game)

That’s it.






Challenges I ran into:






1. Mobile performance (particles are evil and annoying but a must :) )



One of the biggest problems I ran into was too many particles on screen = mobile devices struggle.




  • explosions

  • effects

  • bullet impacts



Solutions I used:




  • pre-render particles to offscreen canvas where possible

  • reduce opacity / brightness on mobile

  • limit particle pools (no dynamic allocation)



In one game I even used a fixed 600-particle pool to avoid garbage collection during gameplay.






2. Assets and CORS issues



Another annoying problem was loading assets locally which caused CORS issues. So I went for a different approach: convert everything to base64 and bundle it directly into the game.

Therefor, I built myself a small tool that:




  • takes files (images/audio)

  • converts them to base64

  • generates an asset.js file
    Then the game just imports that file and everything works offline, no requests.






3. No design focus (placeholders everywhere)



I’m not a designer.

So instead of wasting time trying to make things "pretty", I used placeholders where possible so I can focuse on gameplay and systems.



Some games even use:




  • emojis as characters

  • simple shapes

  • procedural visuals



And honestly… it works fine.






4. Procedural audio (yes, really)



Instead of always using music files, I experimented with generating sound using the Web Audio API



For example:




  • shooting sounds

  • footsteps

  • background noise (even music kind off...)



Of course an MP3 is easier and usually sounds better, but this was more about experimenting.






5. Commenting the code (harder than coding)



This was surprisingly one of the hardest parts.

Writing code for yourself is easy. Explaining it to someone else is not.

Especially if that someone is a beginner. So I tried to comment all important systems, explain "why" not just "what" - Still not perfect, but definitely better than nothing.






What you can find



Here are a few things (you can find in the bundle) that might be useful if you're into game dev (learning how to or just use it elsewhere):



amoeba survival

Amoeba Survival

Infinite procedural map using chunk system

Only visible area is loaded → keeps memory low

Hero evolves through 8 different shapes

Everything is auto-fire → gameplay is about positioning

Also:




  • enemies scale with score

  • up to 200 enemies at the same time






emoji blaster

Emoji Blaster

This one is probably the weirdest :))



Entire game is one JS file (~2000 lines)

Uses emojis as main graphics

One-button control system (tap & hold)



Interesting parts:




  • procedural dungeon (rooms generated on the fly)

  • only current room exists in memory

  • explosion physics that push objects instead of damaging

  • TTS voice lines on boss kills

  • 32 achievements

  • full run + stats saved in localStorage






void invaders

Void Invaders

Classic vertical shooter, but everything in a single JS file, 9:16 canvas → mobile friendly and ships with different stats (HP, damage, inertia)



Technical stuff:




  • pre-rendered enemies and ships (offscreen canvas)

  • parallax background

  • procedural fallback music if audio files missing

  • save system (continue run)

  • scaling difficulty based on wave






Demos



For demos of each game please check the urls on the bundle page:

PayHip or Itch



Final decision: no license - This was another conscious choice.



That means:




  • you can modify the code

  • reuse systems

  • sell your own versions

  • do whatever you want
    Once you buy it: it’s fully yours



I want to share this information not just to sell the bundle, but also to show that:




  • you don’t need big engines

  • you don’t need frameworks

  • you don’t need perfect design



You just need: consistency + finishing what you start!

(Because honestly, the hardest part wasn’t coding, was finishing the projects...)

CTI Threat Relationship Graph2 Knoten / 1 Relationen
CVE / Incident Software MITRE ATT&CK CWE Weakness IoC
SOC Incident Playbook: Remote Code Execution (RCE) Defense
title: Detect Exploitation - I finished 6 JavaScript games… and decided to sell them (with full source code)
id: e3e4169a-a760-457b-8235-e234b5c99800
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "I finished 6 JavaScript games…" ascii wide
    condition:
        any of them
}
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich I finished 6 JavaScript games… and decid.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten I finished 6 JavaScript games… and decided to sell them (with full source code)

Thematisch verwandte Begriffe: finished, JavaScript, games, decided · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-97152 | Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploi…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
🔖 Gespeicherte Artikel
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel Rechts: nächster Artikel unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel TTP ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...

Zurück: vorheriger Vor: nächster
↗ Original-Quelle
Social Reaktionen Deine Reaktion zählt
Einstufung & Relevanz-Poll 0 Stimmen
In sozialen Netzwerken teilen 1-Klick