
Research
/Security News
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.
es-toolkit
Advanced tools
A state-of-the-art, high-performance JavaScript utility library with a small bundle size and strong type annotations.


es-toolkit is a state-of-the-art, high-performance JavaScript utility library with a small bundle size and strong type annotations.
// import from '@es-toolkit/es-toolkit' in jsr.
import { chunk, debounce } from 'es-toolkit';
const debouncedLog = debounce(message => {
console.log(message);
}, 300);
// This call will be debounced
debouncedLog('Hello, world!');
const array = [1, 2, 3, 4, 5, 6];
const chunkedArray = chunk(array, 2);
console.log(chunkedArray);
// Output: [[1, 2], [3, 4], [5, 6]]
es-toolkit provides Agent Skills for AI coding tools like Claude Code, Cursor, and Copilot.
npx skills add toss/es-toolkit
For Claude Code, you can also install via the plugin marketplace:
/plugin marketplace add toss/es-toolkit
/plugin install es-toolkit@es-toolkit-plugin
For more details, see the AI Integration guide.
We welcome contributions from everyone in the community. Read below for a detailed contribution guide.
MIT © Viva Republica, Inc. See LICENSE for details.
FAQs
A state-of-the-art, high-performance JavaScript utility library with a small bundle size and strong type annotations.
The npm package es-toolkit receives a total of 17,761,311 weekly downloads. As such, es-toolkit popularity was classified as popular.
We found that es-toolkit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.