
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
YTDLP Youtube Video Downloader
ytdlp-youtube-video-downloader
Downloads YouTube videos using yt-dlp. NOTE: You will need to download and install a native host messenger so that the extension can use yt-dlp to download directly to your machine. This messenger ONLY runs when you click download on a video. FOSS
Adds a Download button to YouTube's video player interface, letting you save videos in your preferred quality. Works with a locally installed native helper app — no data is sent to any server, ever. Requires a one-time setup of the native messaging host, which also automatically manages yt-dlp and ffmpeg installations for you. For more information on this extension and the native messenger, visit https://yt.wakefield.fyi/setup.html and view the source code at https://github.com/qedjdev/yt-dlp-extension/
FAQs
Downloads YouTube videos using yt-dlp. NOTE: You will need to download and install a native host messenger so that the extension can use yt-dlp to download directly to your machine. This messenger ONLY runs when you click download on a video. FOSS

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.