
Research
5 Malicious Chrome Extensions Enable Session Hijacking in Enterprise HR and ERP Systems
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.
@css-hooks/react
Advanced tools
Hooks add CSS features to native inline styles, enabling you to apply styles
conditionally based on pseudo-classes, custom selectors, media queries, and
more—all without leaving the style prop. By exploiting the hidden
programmability of CSS Variables, CSS Hooks delivers a flexible CSS-in-JS
experience without runtime style injection or build steps.
<button
style={css({
background: "#004982",
color: "#eeeff0",
on: $ => [
$("&:hover", {
background: "#1b659c",
}),
$("&:active", {
background: "#9f3131",
}),
],
})}
>
Save changes
</button>
<label>
<input type="checkbox" checked />
<span
style={css({
on: $ => [
$(":checked + &", {
textDecoration: "line-through",
}),
],
})}
>
Simplify CSS architecture
</span>
</label>
<>
<span
style={css({
on: ($, { not }) => [
$(not("@container sm"), {
display: "none",
}),
],
})}
>
sm
</span>
<span
style={css({
on: ($, { not }) => [
$(not("@container lg"), {
display: "none",
}),
],
})}
>
lg
</span>
</>
Please visit css-hooks.com to get started.
Contributions are welcome. Please see the contributing guidelines for more information.
CSS Hooks is offered under the MIT license.
FAQs
CSS Hooks for React
The npm package @css-hooks/react receives a total of 106 weekly downloads. As such, @css-hooks/react popularity was classified as not popular.
We found that @css-hooks/react demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.