
Research
5 Malicious Chrome Extensions Enable Session Hijacking in Enterprise HR and ERP Systems
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.
A FIFO queue for co.
Create a queue with one producer and two consumers doing fake work:
var Queue = require('co-queue');
var co = require('co');
var wait = require('co-wait');
var queue = new Queue;
co(function*(){
while (true) {
console.log('consumer 1: %s', yield queue.next());
yield wait(Math.random() * 1000);
}
});
co(function*(){
while (true) {
console.log('consumer 2: %s', yield queue.next());
yield wait(Math.random() * 1000);
}
});
setInterval(function(){
queue.push(Math.random());
}, 300);
The output is:
$ make example
consumer 1: 0.4872316620312631
consumer 2: 0.8702194727957249
consumer 1: 0.200025983620435
consumer 2: 0.14811497158370912
consumer 2: 0.6677501150406897
consumer 1: 0.5147413061931729
consumer 2: 0.6373226766008884
consumer 1: 0.5006165818776935
consumer 2: 0.15247466461732984
consumer 2: 0.9118324755690992
^C
You need to run node 0.11.x or higher and add the --harmony flag.
$ npm install co-queue
Create a new FIFO queue.
Push data onto the queue.
Queue#push is bound to the queue, so hooking into existing libraries is easy:
emitter.on('data', queue.push);
stream.on('data', queue.push);
fn(queue.push);
Get the next piece of data.
Set the maximum buffer size. When reached, new data will be dropped.
The overflow event will be emitted whenever data is dropped, which will be passed to fn as first argument.
MIT
FAQs
A FIFO queue for co
We found that co-queue demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.