
Research
/Security News
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.
@hicksy/enhance-csrf
Advanced tools
import { createCsrfToken, verifyCsrfToken } from '@hicksy/enhance-csrf/server/csrf.js'
export let get = [createCsrfToken, two]
export let post = [verifyCsrfToken, two]
async function two (req) {
console.log('hi from two')
console.log(req)
return {
session: req.session,
json: {test: 'one', csrf_token: req.session.csrf}
}
}
FAQs
A CSRF component for enhance projects
We found that @hicksy/enhance-csrf demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.