
Research
5 Malicious Chrome Extensions Enable Session Hijacking in Enterprise HR and ERP Systems
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.
bare-unpack
Advanced tools
Bundle unpacking for Bare.
npm i [-g] bare-unpack
const unpack = require('bare-unpack')
async function writeFile(key) {
// Write the data for `key` to disk or elsewhere and return the resulting path
}
const repacked = await unpack(bundle, writeFile)
const repacked = await unpack(bundle[, options], writeFile)Unpack bundle, writing either all or parts of its files to disk or elsewhere. writeFile is called with the key of every file to write and must return the path to which the file corresponding to the key is written. Any files not written elsewhere will be repacked into a new bundle, which is returned to the caller, and any references to files written outside the bundle will be rewritten.
Options include:
options = {
files: true,
addons: files,
assets: files,
concurrency: 0
}
bare-unpack [flags] <entry>Unpack the bundle at <entry> to --out which defaults to .
Flags include:
--version|-v
--out|-o <path>
--help|-h
Apache-2.0
FAQs
Bundle unpacking for Bare
We found that bare-unpack demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.