
Research
5 Malicious Chrome Extensions Enable Session Hijacking in Enterprise HR and ERP Systems
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.
pear-updater
Advanced tools
The updater the pear-runtime runs on.
npm install pear-updater
const PearUpdater = require('pear-updater')
const u = new PearUpdater(drive, {
directory: '/where/is/platform/dir',
swap: '/current/swap/to/use/0',
checkout: { key: 'z32-key-in-use', length: 42, fork: 0 }, // current checkout in swap
async onupdating(newCheckout) {
// fired before updates with an async ctx
},
async onupdate(newCheckout) {
// fired on updates with an async ctx
}
})
u.on('updating', function (checkout) {
// emitted when a new update is being downloaded
})
u.on('update', function (checkout) {
// emitted when a new update has been downloaded
})
for await (const checkout of u.watch(opts)) {
// watch all updates as they come in, opts forwarded to streamx readable
}
// wait for a min version, opts forwarded to streamx readable
await u.wait(minimumCheckout, opts)
Apache-2.0
FAQs
Pear Updater
The npm package pear-updater receives a total of 332 weekly downloads. As such, pear-updater popularity was classified as not popular.
We found that pear-updater demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.