
Research
5 Malicious Chrome Extensions Enable Session Hijacking in Enterprise HR and ERP Systems
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.
Read all the installed packages in a folder, and produce an Array of all the data.
Read all the installed packages in a folder, and produce an Array of all the data.
A wrapper around npm's read-installed that produces a flat array rather than a nested tree structure. Also adds a few bells and whistles.
Why? Arrays are far easier to process and reason about than nested objects.
npm install --save installed
var installed = require('installed')
// default options
var options = {
dev: false, // exclude all dev dependencies
depth: Infinity, // depth to traverse
extraneous: true // includes extraneous deps. Set to false to filter extraneous dependencies out.
}
// options is optional
installed(process.cwd(), options, function(err, pkgs) {
if (err) throw err;
var pkgVersions = pkgs.map(function(dep) {
return dep.name + '@' + dep.version
})
console.log(pkgVersions.join('\n'))
})
installed.toArrayvar installed = require('installed')
// some pre-calculated npm-ls json data
// e.g. npm ls --json > ./data.json
var depsData = require('./data.json')
// convert nested deps data to array
var depsArray = installed.toArray(depsData)
> installed --help
Read installed package data.
Usage: installed [options]
Options:
--dev Include development dependencies.
--extraneous Show extraneous dependencies [default: true]
--no-extraneous Filter extraneous dependencies. This will include --dev dependencies if --dev is not enabled.
--depth Traversal depth. use --depth=Infinity or --depth=-1 to traverse entire dependency tree. [default: 0]
--color Display coloured output. Auto-disabled if output is not a terminal. [default: true]
--no-color Don't display coloured output, strictly JSON.
--json Produce JSON output. Implies --no-color.
--help Show help
--version Show version number
The program below serializes the result of running installed in the
installed directory. You can see the result of this output at installed-sample.json
Note you'll need to use something like json-stringify-safe in order to safely serialize the data produced by installed, as it contains circular references.
var stringify = require('json-stringify-safe');
var installed = require('installed')
var fs = require('fs')
installed(process.cwd(), {depth: 0}, function(err, pkgs) {
if(err) throw err;
console.log(stringify(i, null, 2))
})
pkgrep was briefly known as installed so versions of installed <
2.0.0 are actually deprecated versions of pkgrep.
MIT
FAQs
Read all the installed packages in a folder, and produce an Array of all the data.
The npm package installed receives a total of 341 weekly downloads. As such, installed popularity was classified as not popular.
We found that installed demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.