As of Node.js version 18.0.0, Node.js handles Slowloris attacks by periodically checking all sockets every 30 seconds and closing any that have expired. It maintains a list of connected sockets to make these checks effective.