
Research
5 Malicious Chrome Extensions Enable Session Hijacking in Enterprise HR and ERP Systems
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.
macrocomponent
Advanced tools
Convenience wrapper around the nanocomponent DOM component library, for the most common case.
Instead of this boilerplate-y thing:
const Component = require('nanocomponent')
const html = require('bel')
const morph = require('nanomorph')
const inherits = require('util').inherits
function View () {
Component.call(this)
this.foo = null
this.bar = null
}
inherits(View, Component)
View.prototype._update = function (state) {
return state.foo !== this.foo
|| state.bar !== this.bar
}
View.prototype._render = function (state) {
this.foo = state.foo
this.bar = state.bar
const el = html`
<p>
Hey ${state.foo}, how are you ${state.bar}ing?
</p>
`
if (this._element) morph(this._element, el)
else this._element = el
return this._element
}
You can now do this:
const component = require('macrocomponent')
const view = component(() => `
<p>
Hey ${this.props.foo}, how are you ${this.props.bar}ing?
</p>
`)
..and it implements the same logic!
$ npm install macrocomponent
MIT
FAQs
Convenience wrapper around nanocomponent, for the most common case
We found that macrocomponent demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.