
Research
5 Malicious Chrome Extensions Enable Session Hijacking in Enterprise HR and ERP Systems
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.
server-error
Advanced tools
Create an error and send it to a logger.
const serverError = require('server-error')
const bole = require('bole')
const log = bole('my-package')
const error = serverError(log)
error.client('oh no!')
// {
// type: 'client',
// statusCode: 400,
// message: 'oh no!',
// url: null
// }
error.client({ message: 'not found', statusCode: 404 })
// {
// type: 'client',
// statusCode: 404,
// message: 'not found',
// url: null
// }
error.server({ message: 'something went wrong', url: 'http://api.foo.io' })
// {
// type: 'server',
// statusCode: 500,
// message: 'something went wrong',
// url: 'http://api.foo.io'
// }
error.wrap(new Error('something critical went wrong'))
// {
// type: 'server',
// statusCode: 500,
// message: 'Internal Server Error'
// }
Create a new error object that logs to a logger.
Create a new client error that defaults to statusCode 400. Takes either a
string or object. Uses log.warn.
Create a new server error that defaults to statusCode 500. Takes either a
string or object. Uses log.error.
Wrap an existing error into an error that can be returned to the client. Useful
to handle unexpected state without leaking information to the outside world.
Uses statusCode 500 and log.error.
$ npm install server-error
FAQs
Create an error and send it to a logger
We found that server-error demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.