
Research
5 Malicious Chrome Extensions Enable Session Hijacking in Enterprise HR and ERP Systems
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.
lucy-codegen
Advanced tools
A library for auto-generating source code in different programming languages. Useful for creating SDKs and sample code.
Generators are contained in the generators/ directory. Each generator takes in a language and generates sample code for achieving some goal in that language:
You can see samples of the generated code in the test/golden directory
Languages are described in the langs/ directory. Each language is expected to implement certain fields and functions for generating code in that language. For instance, JavaScript has the following implementation:
var JS = {
name: 'javascript',
label: 'JavaScript',
extension: '.js',
nulltype: 'null',
}
JS.comment = function(str) { return '// ' + str }
JS.for = function(iter) {
return iter.group + '.forEach(function(' + iter.iterator + ', index) {';
}
JS.rof = function(iter) {
return '});'
}
JS.if = function(cond) {
return 'if(' + cond +') {'
}
JS.fi = function(cond) {
return '}'
}
Languages are expected to implement the following fields and functions:
name: Should match the language's subdirectorylabel: A human-readable label for this languageextension: The default file extension for this languagenulltype: A string that represents a null valuecomment(str): A comment block containing the given textfor(cond): The opening of a for() looprof(cond): The end of a for() loopif(cond): The opening of an if() statementfi(cond): The end of an if() statementvariable(name): Turns JS syntax (e.g. js foo.bar[3].baz ) into syntax for this languageliteral(literal): Turn a JSON serializable object into code for describing it as a literal in this languageconcat(strings): Code to concatenate the provided stringsjsonEncode(variable): Code to convert variable to a JSON stringhtml: A set of functions for generating HTML templates in this language (e.g. EJS for Node, ERB for Ruby)html.for(cond)html.rof(cond)html.if(cond)html.fi(cond)html.variable(name)html.variableJS(name)app: A set of instructions for building code that serves a Single Page ApplicationFAQs
Code Generation in multiple languages
We found that lucy-codegen demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.