
Threat Research
/Security News
Searchjacked: Hidden Browser Extensions Hijack Searches for 13 Million Users
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.
@bonsae/nrg-runtime
Advanced tools
The runtime for Node-RED nodes built with @bonsae/nrg — node base classes, schemas, AJV validator, and the editor client. Carries no build tooling.
The runtime for Node-RED nodes built with @bonsae/nrg — node base classes, JSON Schema types, the AJV validator, and the editor client runtime. It carries only what a built node needs at runtime (TypeBox, AJV, Vue) and none of the build tooling (no Vite/esbuild/TypeScript).
[!NOTE] You normally don't install this directly.
@bonsae/nrgdepends on it, and a node you build declares@bonsae/nrg-runtime(not the toolkit) as its only nrg dependency — so installing a built node pulls just this small runtime, never the authoring toolchain.
IONode, Node, ConfigNode) and type registrationSchemaType (TypeBox) schema builders and the AJV validatorPublished lockstep with @bonsae/nrg at the same version. While nrg is at v0, breaking changes can land in any release without a major bump — pin an exact version and review the changelog before upgrading.
See LICENSE.
FAQs
The runtime for Node-RED nodes built with @bonsae/nrg — node base classes, schemas, AJV validator, and the editor client. Carries no build tooling.
The npm package @bonsae/nrg-runtime receives a total of 0 weekly downloads. As such, @bonsae/nrg-runtime popularity was classified as not popular.
We found that @bonsae/nrg-runtime demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.

Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.