
Research
5 Malicious Chrome Extensions Enable Session Hijacking in Enterprise HR and ERP Systems
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.
A tiny (242B) shim for when
Element.classListcannot be used~!
This module exposes three module definitions:
dist/classico.mjsdist/classico.jsdist/classico.min.js$ npm install --save classico
import { remove, toggle } from 'classico';
const $ = document.querySelector.bind(document);
const isOpen = 'menu__open';
$('.menu-nav').onclick = () => {
toggle(document.body, isOpen);
};
$('.menu-overlay').onclick = () => {
remove(document.body, isOpen);
};
Returns: Boolean
Checks if the Element's className contains the class value – akin to Element.classList.contains().
Returns: undefined
Add the class value(s) to the Element's className – akin to Element.classList.add().
Note: Classico will not append a className if the Element already contains it.
let elem = document.body;
// add one class
classico.add(elem, 'foo');
// add multiple classes
classico.add(elem, 'foo', 'bar', 'baz');
//=> Only 'bar' & 'baz' were added this time!
Returns: undefined
Remove the class value(s) to the Element's className – akin to Element.classList.remove().
let elem = document.body;
// remove one class
classico.remove(elem, 'foo');
// remove multiple classes
classico.remove(elem, 'bar', 'baz');
Returns: Boolean
Toggles the existence of a class for an Element – akin to Element.classList.toggle().
When force is not defined, the str value will be added if not already and removed if it existed.
If force is defined and truthy, the str value will be added.
If force is defined and falsey, the str value will be removed.
Returns true if the class was successfully added to the Element.
Returns false if the class was removed from the Element's className value.
MIT © Luke Edwards
FAQs
A tiny (242B) shim when Element.classList cannot be used~!
The npm package classico receives a total of 0 weekly downloads. As such, classico popularity was classified as not popular.
We found that classico demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.