
Research
/Security News
Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.
Browser-friendly inheritance fully compatible with standard node.js inherits()
Browser-friendly inheritance fully compatible with standard node.js inherits.
This package exports standard inherits from node.js util module in
node environment, but also provides alternative browser-friendly
implementation through browser
field. Alternative
implementation is a literal copy of standard one located in standalone
module to avoid requiring of util. It also has a shim for old
browsers with no Object.create support.
While keeping you sure you are using standard inherits
implementation in node.js environment, it allows bundlers such as
browserify to not
include full util package to your client code if all you need is
just inherits function. It worth, because browser shim for util
package is large and inherits is often the single function you need
from it.
It's recommended to use this package instead of
require('util').inherits for any code that has chances to be used
not only in node.js but in browser too.
var inherits = require('inherits');
// then use exactly as the standard one
Version ~1.0 had completely different motivation and is not compatible
neither with 2.0 nor with standard node.js inherits.
If you are using version ~1.0 and planning to switch to ~2.0, be careful:
super_ instead of super for referencing
superclassThe util package is a core Node.js module that provides a variety of utilities including the 'util.inherits' method, which is similar to the 'inherits' package. It allows you to set up inheritance between constructor functions. However, 'util.inherits' does not support ES6 classes and is considered a legacy feature in Node.js.
The extend package is a utility to shallowly extend one object with one or more others. It is similar to inherits in that it is used to extend objects, but it does not set up the prototype chain for classical inheritance. Instead, it copies properties from source objects to a target object.
The class-extend package provides helper functions for dealing with inheritance in JavaScript, specifically designed for ES6 classes. It offers a more modern approach compared to inherits, which is more suited for constructor functions rather than ES6 classes.
FAQs
Browser-friendly inheritance fully compatible with standard node.js inherits()
The npm package inherits receives a total of 125,177,913 weekly downloads. As such, inherits popularity was classified as popular.
We found that inherits demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.

Research
/Security News
Docker and Socket have uncovered malicious Checkmarx KICS images and suspicious code extension releases in a broader supply chain compromise.

Product
Stay on top of alert changes with filtered subscriptions, batched summaries, and notification routing built for triage.