
Research
5 Malicious Chrome Extensions Enable Session Hijacking in Enterprise HR and ERP Systems
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.
pear-changelog
Advanced tools
Changelog parsing and diffing
The format of the changelog is fairly simple
arbitrary mardown here as a header
## release title
arbitrary markdown here
## release title
arbitrary markdown here
There is a header of unspecified shape, and various release entries, that use the format
## title
content
The module contains a couple of functions:
const { parse, diff } = require('pear-changelog')
the parse function returns an array of releases.
Each release is another array, with index 0 being the title of the release, and index 1 being the entire body of the release (in markdown, including the title).
If it receives anything other than a string or a buffer with the correct format, it will return an empty array.
the diff function compares two arrays of releases, and return a new array with the releases that are in the first array but not in the second one.
const log1 = `
# Changelog
## newer entry
content
## older entry
content
`
const log2 = `
# Changelog
## older entry
content
`
const bLog1 = Buffer.from(log1)
const bLog2 = Buffer.from(log2)
const pLog1 = parse(bLog1)
const pLog2 = parse(bLog2)
console.log(pLog2)
// this prints [ [ 'older entry', '\n## older entry\ncontent\n' ] ]
const difference = diff(pLog1, pLog2)
console.log(difference)
// this prints [ [ 'newer entry', '\n## newer entry\ncontent\n' ] ]
Apache 2.0
FAQs
Changelog parsing & diffing
We found that pear-changelog demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.