
Research
5 Malicious Chrome Extensions Enable Session Hijacking in Enterprise HR and ERP Systems
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.
flow-parser
Advanced tools
This package contains the Flow parser in its compiled-to-JavaScript form.
See flow.org. The code for the Flow parser lives on GitHub.
The Flow Parser is a JavaScript parser written in OCaml. It produces an AST that conforms to the ESTree spec and that mostly matches what esprima produces. The Flow Parser can be compiled to native code or can be compiled to JavaScript using js_of_ocaml. This npm package contains the Flow parser compiled to JavaScript.
You can use the Flow parser in your browser or in node. To use in node you can just do
require('flow-parser').parse('1+1', {});
To use in the browser, you can add
<script src="flow_parser.js"></script>
which will make the flow object available to use like so:
flow.parse('1+1', {});
The second argument to flow.parse is the options object. Currently supported options:
types (boolean, default true) - enable parsing of Flow typesuse_strict (boolean, default false) - treat the file as strict, without needing a "use strict" directivecomments (boolean, default true) - attach comments to AST nodes (leadingComments and trailingComments)all_comments (boolean, default true) - include a list of all comments from the whole programtokens (boolean, default false) - include a list of all parsed tokens in a top-level tokens propertyenums (boolean, default false) - enable parsing of enumsmatch (boolean, default false) - enable parsing of match expressions and match statementscomponents (boolean, default false) - enable parsing of component syntaxassert_operator (boolean, default false) - enable parsing of the assert operatoresproposal_decorators (boolean, default false) - enable parsing of decoratorsAcorn is a small, fast, JavaScript-based JavaScript parser that produces an AST. It is used by various tools within the JavaScript ecosystem. Acorn is highly extensible through plugins and can handle modern JavaScript syntax. While flow-parser is specific to Flow type annotations, Acorn is more general-purpose and does not have built-in support for Flow types.
typescript-eslint-parser is a parser that allows ESLint to lint TypeScript code. It converts TypeScript into an ESTree-compatible form so it can be used in the existing ESLint ecosystem. Unlike flow-parser, which is specific to Flow, typescript-eslint-parser is designed to work with TypeScript and can be used to enforce TypeScript-specific linting rules.
FAQs
JavaScript parser written in OCaml. Produces ESTree AST
The npm package flow-parser receives a total of 4,174,994 weekly downloads. As such, flow-parser popularity was classified as popular.
We found that flow-parser demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.