
Research
5 Malicious Chrome Extensions Enable Session Hijacking in Enterprise HR and ERP Systems
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.
@npms/queries
Advanced tools
Module that offers a variety of queries around npms data.
$ npm install @npms/queries
For now, only queries related to search are available. Though, the goal of this module is to provide other interesting queries in the near future, such as top ranked modules, top authors, etc.
Performs a search query.
Besides normal text, q supports qualifiers to express filters and other modifiers.
The esClient accepts a elasticsearch instance or a config to instantiate it.
You may read the API docs to know which qualifiers are available.
const queries = require('@npms/queries');
// ...
queries.search('test framework', esClient)
.then((res) => {
console.log('total', res.total);
console.log('results', res.results);
});
Available options:
from: The offset in which to start searching from, defaults to 0size: The total number of results to return, defaults to 25throwOnInvalid: Whether to reject the promise if the query has invalid qualifiers or not, defaults to false (if false, invalid qualifiers will be removed from q)Fetch search suggestions to be typically displayed when doing autocomplete.
Only normal text is supported in q but any qualifiers will be automatically discarded.
The esClient accepts a elasticsearch instance or a config to instantiate it.
const queries = require('@npms/queries');
// ...
queries.search.suggestions('gulp', esClient)
.then((suggestions) => console.log('suggestions', suggestions));
Available options:
boostExact: How much should the score of exact matches be boosted? defaults to 100000.size: The total number of results to return, defaults to 25analyzerWeight: How much should we weight the analyzer's score.final by? defaults to 1.0.scoreWeight: How much should we weight the search _score? defaults to 0.3.Perform a fuzzy search for similarly named packages.
Results are ranked based on a combination of analyzer weightings (quality, popularity, maintenance) and the _score returned by the fuzzy match.
const queries = require('@npms/queries');
// ...
queries.search.similar('chaik', esClient)
.then(results => {
// perhaps we were instead looking for chalk?
});
Available options:
size: The total number of results to return, defaults to 10.analyzerWeight: How much should we weight the analyzer's score.final by? defaults to 2.2.scoreWeight: How much should we weight the search _score? defaults to 1.5.minScore: defaults to 4.5.the above default values were based on trial and error examining the top npm modules, they will likely change over time.
$ npm test
$ npm test-cov to get coverage report
Released under the MIT License.
FAQs
Module that offers a variety of queries around npms data
We found that @npms/queries demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.