
Research
5 Malicious Chrome Extensions Enable Session Hijacking in Enterprise HR and ERP Systems
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.
@blimu/client
Advanced tools
This is an auto-generated TypeScript/JavaScript SDK for the Blimu API.
npm install @blimu/client
# or
yarn add @blimu/client
import { BlimuClient } from '@blimu/client';
// Create a new client
const client = new BlimuClient({
baseURL: 'https://api.example.com',
timeoutMs: 10000,
retry: { retries: 2, backoffMs: 300, retryOn: [429, 500, 502, 503, 504] },
// Environment-based baseURL (optional)
env: 'sandbox',
envBaseURLs: {
sandbox: 'https://api-sandbox.example.com',
production: 'https://api.example.com',
},
// Auth (generic API Key or Bearer header)
accessToken: process.env.API_TOKEN,
headerName: 'access_token', // or 'Authorization' (defaults to Authorization: Bearer <token>)
});
// Example: Logout and invalidate session
try {
const result = await client.auth.logout();
console.log('Result:', result);
} catch (error) {
// ApiError with structured data
console.error(error);
}
const client = new BlimuClient({
env: 'sandbox',
envBaseURLs: {
sandbox: 'https://api-sandbox.example.com',
production: 'https://api.example.com',
},
accessToken: async () => process.env.API_TOKEN!,
headerName: 'access_token',
});
client.setAccessToken('new-token');
import { listAll } from '@blimu/client';
const allPayments = await listAll((query) => client.payment.listPayments(query), { limit: 100 });
const client = new BlimuClient({
onRequest: ({ url, init }) => console.debug('->', init.method, url),
onResponse: ({ response }) => console.debug('<-', response.status),
onError: (err) => console.warn('request error', err),
});
This SDK supports the following authentication methods:
Bearer token authentication:
const client = new BlimuClient({
bearer: 'your-bearer-token',
});
import { PaymentService, Schema } from '@blimu/client';
This SDK is written in TypeScript and provides full type safety:
import { BlimuClient, Schema } from '@blimu/client';
const client = new BlimuClient({
/* config */
});
// All methods are fully typed
const result: unknown = await client.auth.logout(/* ... */);
// Schema types are available
const data: Schema.EntitlementType = {
// Fully typed object
};
For Node.js environments, you may need to provide a fetch implementation:
npm install undici
import { fetch } from 'undici';
import { BlimuClient } from '@blimu/client';
const client = new BlimuClient({
baseURL: 'https://api.example.com',
fetch,
});
The SDK includes the following TypeScript interfaces:
All types are available under the Schema namespace:
import { Schema } from '@blimu/client';
// Use any model type
const user: Schema.User = {
/* ... */
};
This SDK is auto-generated. Please do not edit the generated files directly. If you find issues, please report them in the main project repository.
This SDK is generated from the Blimu API specification.
FAQs
TypeScript SDK for Blimu API (auto-generated)
The npm package @blimu/client receives a total of 131 weekly downloads. As such, @blimu/client popularity was classified as not popular.
We found that @blimu/client demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.