Python spyware that captures keystrokes, mouse inputs, screenshots & microphone audio — exfiltrates via email every 10 seconds with self-delete on discovery.

Device Bound Session Credentials (DBSC) for Node.js — Express, Fastify, Hono & Next.js middleware that binds session cookies to a hardware TPM key to stop cookie theft, with a Web Crypto polyfill for Firefox & Safari.

Device Bound Session Credentials (DBSC) for Symfony: protect sessions from cookie theft with hardware-bound keys.