
Research
5 Malicious Chrome Extensions Enable Session Hijacking in Enterprise HR and ERP Systems
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.
github-basic
Advanced tools
Basic https interface to GitHub
npm install github-basic
Make a request to one of the github APIs. Handles redirects transparently and makes errors into proper error objects
var github = require('github-basic')
//get all 'ForbesLindesay's gists in the last year
var since = new Date()
since.setUTCFullYear(since.getUTCFullYear() - 1)
// using callbacks
github('GET', '/users/:user/gists', {user: 'ForbesLindesay', since: since}, function (err, res) {
if (err) throw err;
res.body.pipe(process.stdout)
})
// or
github('GET', '/users/ForbesLindesay/gists', {since: since}, function (err, res) {
if (err) throw err;
res.body.pipe(process.stdout)
})
// using promises
github('GET', '/users/:user/gists', {user: 'ForbesLindesay', since: since})
.done(function (res) {
res.body.pipe(process.stdout)
})
//or
github('GET', '/users/ForbesLindesay/gists', {since: since})
.done(function (res) {
res.body.pipe(process.stdout)
})
head, get, delete, post, patch or put/gists/public or /users/:user/gists{since: new Date(2000, 0, 1)} or {user: 'ForbesLindesay'}{type:'oauth',token:'<my oauth token>'} or {type:'basic',username:'my user',password:'my password'}ms like '30 minutes'https) can be http or httpsapi.github.com) can be api.github.com, github.com or gist.github.com{}) override default headers in the requestA standard response object with a readable stream as the .body property. (N.B. don't stream res, stream res.body)
Same as github(method, path, query, options, callback) except res.body is a string containing the buffered response
Same as github(method, path, query, options, callback) except res.body is a JSON object containing the parsed response
MIT
FAQs
Basic https interface to GitHub
The npm package github-basic receives a total of 486 weekly downloads. As such, github-basic popularity was classified as not popular.
We found that github-basic demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.