
Research
5 Malicious Chrome Extensions Enable Session Hijacking in Enterprise HR and ERP Systems
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.
pear-hotmods
Advanced tools
The `pear-hotmods` library is a Pear ecosystem library. It automatically reloads Module instances which can be passed on to a live-reload mechanism commonly supplied by frontend-frameworks.
The pear-hotmods library is a Pear ecosystem library.
It automatically reloads Module instances which can be passed on to a live-reload mechanism commonly supplied by frontend-frameworks.
npm install pear-hotmods
const { hotmods } = await import('pear-hotmods')
import hotmods from 'pear-hotmods'
hotmods([options, ] listener <Async Function|Function>)Call the listener function
Options
paths <Array> - paths allowlist to match against. Paths are drive keys: they are rooted to application root. If unset or empty array, matches against all paths.Scenario where Preact framework is being used with prefresh for hot-reloading during application development:
if (Pear.config.dev) {
const { hotmods } = await import('pear-hotmods')
await import('@prefresh/core')
hotmods({ paths: ['/components'] }, (reloads) => {
for (const { original, previous, next, type, key } of reloads) {
console.log('Hot reloading - path:', key, 'operation:', type)
window.__PREFRESH__.replaceComponent(original, next, true)
window.__PREFRESH__.replaceComponent(previous, next, true)
}
})
}
Apache-2.0
FAQs
The `pear-hotmods` library is a Pear ecosystem library. It automatically reloads Module instances which can be passed on to a live-reload mechanism commonly supplied by frontend-frameworks.
We found that pear-hotmods demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.