
Research
5 Malicious Chrome Extensions Enable Session Hijacking in Enterprise HR and ERP Systems
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.
localdrive
Advanced tools
File system API that is similar to Hyperdrive
npm i localdrive
const Localdrive = require('localdrive')
const drive = new Localdrive('./my-project')
await drive.put('/blob.txt', Buffer.from('example'))
await drive.put('/images/logo.png', Buffer.from('..'))
await drive.put('/images/old-logo.png', Buffer.from('..'))
const buffer = await drive.get('/blob.txt')
console.log(buffer) // => <Buffer ..> "example"
const entry = await drive.entry('/blob.txt')
console.log(entry) // => { key, value: { executable, linkname, blob, metadata } }
await drive.del('/images/old-logo.png')
await drive.symlink('/images/logo.shortcut', '/images/logo.png')
for await (const file of drive.list('/images')) {
console.log('list', file) // => { key, value }
}
const rs = drive.createReadStream('/blob.txt')
for await (const chunk of rs) {
console.log('rs', chunk) // => <Buffer ..>
}
const ws = drive.createWriteStream('/blob.txt')
ws.write('new example')
ws.end()
ws.once('close', () => console.log('file saved'))
const drive = new Localdrive(root, [options])Creates a drive based on a root directory. root can be relative or absolute.
Available options:
{
followLinks: false, // If enabled then `entry(key)` will follow the `linkname`
metadata: { // Hook functions are called accordingly
get (key) {},
put (key) {},
del (key) {}
},
atomic: false, // Enable atomicity for file writing (tmp file and rename)
roots: {} // For mapping key prefixes to different roots
}
The metadata hook del() could be called with non-existing metadata keys.
drive.rootString with the resolved (absolute) drive path.
drive.supportsMetadataBoolean that indicates if the drive handles or not metadata. Default false.
If you pass opts.metadata hooks then supportsMetadata becomes true.
await drive.put(key, buffer, [options])Creates a file at key path in the drive. options are the same as in createWriteStream.
const buffer = await drive.get(key, [options])Returns the blob at key path in the drive. If no blob exists, returns null.
It also returns null for symbolic links.
options are the same as in drive.entry method.
const entry = await drive.entry(key, [options])Returns the entry at key path in the drive. It looks like this:
{
key: String,
value: {
executable: Boolean,
linkname: null,
blob: {
byteOffset: Number,
blockOffset: Number,
blockLength: Number,
byteLength: Number
},
metadata: null
},
mtime: Number
}
Available options:
{
follow: false // Follow symlinks, 16 max or throws an error
}
await drive.del(key)Deletes the file at key path from the drive.
await drive.symlink(key, linkname)Creates an entry in drive at key path that points to the entry at linkname.
If a blob entry currently exists at key path then it will get overwritten and drive.get(key) will return null, while drive.entry(key) will return the entry with symlink information.
const comparison = drive.compare(entryA, entryB)Returns 0 if entries are the same, 1 if entryA is older, and -1 if entryB is older.
const iterator = drive.list([folder], [options])Returns a stream of all entries in the drive inside of specified folder.
Available options:
{
ignore: String || Array // Ignore file and folders by name.
}
const iterator = drive.readdir([folder])Returns a stream of all subpaths of entries in drive stored at paths prefixed by folder.
const mirror = drive.mirror(out, [options])Efficiently mirror this drive into another. Returns a MirrorDrive instance constructed with options.
Call await mirror.done() to wait for the mirroring to finish.
const rs = drive.createReadStream(key, [options])Returns a stream to read out the blob stored in the drive at key path.
Available options:
{
start: Number,
end: Number,
length: Number
}
start and end are inclusive.
length overrides end, they're not meant to be used together.
const ws = drive.createWriteStream(key, [options])Stream a blob into the drive at key path.
Available options:
{
executable: Boolean
}
Metadata backed by Map:
const meta = new Map()
const metadata = {
get: (key) => meta.has(key) ? meta.get(key) : null,
put: (key, value) => meta.set(key, value),
del: (key) => meta.delete(key)
}
const drive = new Localdrive('./my-app', { metadata })
// ...
Note: metadata.del() will also be called when metadata is null:
await drive.put('/file.txt', Buffer.from('a')) // Default metadata is null
Apache-2.0
FAQs
File system interoperable with Hyperdrive
The npm package localdrive receives a total of 1,145 weekly downloads. As such, localdrive popularity was classified as popular.
We found that localdrive demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.