
Research
5 Malicious Chrome Extensions Enable Session Hijacking in Enterprise HR and ERP Systems
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.
@exodus/eslint-config
Advanced tools
@exodus/eslint-configConfig for eslint to use in Exodus projects
For any addition or changes to the existing corpus of rules, please refer to the instructions in the pull request template.
Any PR merged to master will be automatically versioned and published using semantic release. Therefore it is important that you stick to the conventional commits specification when writing your commit messages.
The config offers a few different flavors depending on your use-case:
Config for vanilla JS projects
Use yarn add --dev @exodus/eslint-config eslint to install the required dependencies and the snippet below to initialize your .eslintrc.js
// .eslintrc.js
module.exports = {
extends: ['@exodus/eslint-config/javascript'],
// ... customization
}
Config for JS projects using Babel.
Use yarn add --dev @exodus/eslint-config eslint @babel/eslint-parser to install the required dependencies and the snippet below to initialize your .eslintrc.js
// .eslintrc.js
module.exports = {
extends: ['@exodus/eslint-config/javascript-babel'],
// ... customization
}
Config for JS projects using React and Babel.
Use
yarn add --dev @exodus/eslint-config eslint \
@babel/eslint-parser \
@babel/preset-react \
eslint-plugin-react \
eslint-plugin-react-hooks
to install the required dependencies and the snippet below to initialize your .eslintrc.js
// .eslintrc.js
module.exports = {
extends: ['@exodus/eslint-config/javascript-react-babel'],
// ... customization
}
Use
yarn add --dev @exodus/eslint-config eslint \
@typescript-eslint/parser \
@typescript-eslint/eslint-plugin \
eslint-import-resolver-typescript
and the snippet below to initialize your .eslintrc.js
// .eslintrc.js
module.exports = {
extends: ['@exodus/eslint-config/typescript'],
// ... customization
}
Use
yarn add --dev @exodus/eslint-config eslint \
@typescript-eslint/parser \
@typescript-eslint/eslint-plugin \
eslint-plugin-react \
eslint-import-resolver-typescript \
@exodus/eslint-plugin-react-hooks
to install the required dependencies and the snippet below to initialize your .eslintrc.js
// .eslintrc.js
module.exports = {
extends: ['@exodus/eslint-config/typescript-react'],
// ... customization
}
Use
yarn add --dev @exodus/eslint-config eslint \
@typescript-eslint/parser \
@typescript-eslint/eslint-plugin \
eslint-import-resolver-typescript
and the snippet below to initialize your .eslintrc.js
// .eslintrc.js
module.exports = {
overrides: [
{
files: ['*.{ts,tsx}'],
extends: ['@exodus/eslint-config/typescript'],
},
{
files: ['*.{js,jsx}'],
extends: ['@exodus/eslint-config/javascript'],
},
],
}
When adding a new rule, you can capture the tech debt of fixing current violations by first whitelisting them with // eslint-disable-next-line <ruleName>. To generate these comments for an entire project, use our fork of suppress-eslint-errors:
# assuming you installed the tool globally
suppress-eslint-errors ./src/ --extensions=js,jsx --rules="no-restricted-imports"
This will generate comments of the form:
// eslint-disable-next-line no-restricted-imports -- TODO: Fix this the next time the file is edited.
For non-tech-debt exceptions to a rule, you can remove the TODO line.
FAQs
Set of eslint plugins and rules to use in Exodus projects
We found that @exodus/eslint-config demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 94 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.