
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
yt-grabber
Adds a Download button to YouTube and YouTube Music videos and playlists, sent straight to your local downloader app. 24.07.2026 : Added Download for Shorts and TikTok
YT Grabber adds a "Grab" download button directly on YouTube and YouTube Music — next to the Like/Share row on video pages, and near the header on playlist pages.
Clicking it sends the current video, track, or playlist URL to a small companion app running on your own computer (127.0.0.1), which uses yt-dlp to download it:
This extension does not collect, transmit, or store any personal data. It only talks to localhost — nothing is sent to any third-party server. It requires the companion desktop app to be running to function; it does nothing on its own otherwise.
FAQs
Adds a Download button to YouTube and YouTube Music videos and playlists, sent straight to your local downloader app. 24.07.2026 : Added Download for Shorts and TikTok

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.