
Research
5 Malicious Chrome Extensions Enable Session Hijacking in Enterprise HR and ERP Systems
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.
tiny-buffer-rpc
Advanced tools
Lightweight binary bi-directional RPC.
npm i tiny-buffer-rpc
const RPC = require('tiny-buffer-rpc')
const c = require('compact-encoding')
const rpc1 = new RPC(send1)
const rpc2 = new RPC(send2)
rpc1.register(0, {
request: c.string,
response: c.string,
onrequest: data => 'world'
})
const ping = rpc2.register(0, {
request: c.string,
response: c.string
})
await ping.request('hello') // 'world'
function send1 (data) {
rpc2.recv(data)
}
function send2 (data) {
rpc1.recv(data)
}
const rpc = new RPC(send)Construct a new TinyBufferRPC instance.
send must be a function that takes a Buffer, and should handle forwarding requests
between the two sides.
const method = rpc.register(id, opts)Register a new RPC method for the given id
id must be an Integer >= 0.
If onrequest is provided, this method will be able to handle requests.
The return value of onrequest will be encoded with the response encoding, then sent.
If onrequest throws, the error will be forwarded back to the requester.
opts should include:
{
request: c.buffer, // The request encoding
response: c.buffer, // The response encoding
onrequest: data => { ... } // A request handler
}
const response = await method.request(data)Send a request.
data will be encoded with the request encoding.
method.send(data)Unidirectionally send data without expecting a response.
Useful for sending events.
data will be encoded with the request encoding.
FAQs
Lightweight binary RPC
The npm package tiny-buffer-rpc receives a total of 606 weekly downloads. As such, tiny-buffer-rpc popularity was classified as not popular.
We found that tiny-buffer-rpc demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.