Prototype pollution flaws are "the next big thing" in JavaScript security research.

Finally, for more information about JavaScript, I recommend David Flanagan's JavaScript: The Definitive Guide, published by O'Reilly and now in its fifth edition.