
Research
5 Malicious Chrome Extensions Enable Session Hijacking in Enterprise HR and ERP Systems
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.
initialize
Advanced tools
Create a new repo with sane defaults. Provides all the tools needed to create a unix style module.
$ npm install -g initialize
initialize - generate a fresh package
Usage: initialize [options]
Options:
-h, --help Output usage information
-v, --version Output version number
-u, --user Override user with organization
-d, --directory Specify output directory
Examples:
$ initialize # generate package in `./`
$ initialize -d ./dir # generate package in `./dir`
$ initialize -u npm # generate package for `npm`
Docs: https://github.com/yoshuawuyts/initialize
Bugs: https://github.com/yoshuawuyts/initialize/issues
Requires npm to be configured:
# required
npm config set init.author.name "Your Name"
npm config set init.author.email "me@example.com"
npm config set init.author.github "your-github-handle"
# optional, defaults to your github
npm config set init.author.url "http://your-site.com/"
The following variables are used in the templates:
name Name of the package
varName Name of package usable as JS var
description Description of the package
tags Package tags
user Logged in user (github)
realName User's real name
date.year Current year
date.month Current month
date.day Current day
date.date Current date
FAQs
Generate a fresh package
We found that initialize demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.