
Research
5 Malicious Chrome Extensions Enable Session Hijacking in Enterprise HR and ERP Systems
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.
Simple wrapper around pegjs; caches parsers built from grammar files; provides callback interface for parsing files.
See http://pegjs.majda.cz/documentation#grammar-syntax-and-semantics for details on grammar files.
npm install quickpeg
var quickpeg = require('quickpeg');
quickpeg('my.grammar', function (err, parser) {
parser.parseFile('my.source', function (err, result) {
// result of parsing my.source with my.grammar
// by default, parser is now cached to my.grammar.js
});
});
Converts a grammar file to a parser and caches the result (if caching is not disabled). Returns the parser to the callback.
grammarFile - The path to the peg grammar file.options - Options:
cache - Set to one of the following values:
true - Append .js to grammar file path and cache to that location.false - Disable parser caching.some/dir - Append .js to grammar filename and cache to some/dir.some/filename - Cache to some/filename.cb - Callback called with (err, parser). See below for the parser API.Creates a quickpeg function with default options.
options - Default options for the quickpeg function.quickpegFunction - Configured quickpeg function.Parses a string with the parser and returns the result.
sourceString - Source string to be parsed.result - Result of parsing sourceString with the parser.See http://pegjs.majda.cz/documentation#using-the-parser for more details.
Parses a file with the parser and returns the result on a callback.
sourceFile - The path to the source file.cb - Callback called with (err, result).FAQs
Filename/callback interface to pegjs.
The npm package quickpeg receives a total of 443 weekly downloads. As such, quickpeg popularity was classified as not popular.
We found that quickpeg demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.