
Research
/Security News
60 Malicious Ruby Gems Used in Targeted Credential Theft Campaign
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
org.mongodb.spark:mongo-spark-connector
Advanced tools
The official MongoDB Apache Spark Connect Connector.
The official MongoDB Spark Connector.
See: https://docs.mongodb.com/spark-connector/
The binaries and dependency information for Maven, SBT, Ivy, and others can also be found on Maven Central.
For issues with, questions about, or feedback for the MongoDB Kafka Connector, please look into our support channels. Please do not email any of the Kafka connector developers directly with issues or questions - you're more likely to get an answer on the MongoDB Community Forums.
At a minimum, please include in your description the exact version of the driver that you are using. If you are having connectivity issues, it's often also useful to paste in the Kafka connector configuration. You should also check your application logs for any connectivity-related exceptions and post those as well.
Think you’ve found a bug? Want to see a new feature in the Kafka driver? Please open a case in our issue management tool, JIRA:
Bug reports in JIRA for the connector are public.
If you’ve identified a security vulnerability in a connector or any other MongoDB project, please report it according to the instructions here.
To build the connector:
$ git clone https://github.com/mongodb/mongo-spark.git
$ cd mongo-spark
$ ./gradlew clean check
FAQs
Unknown package
We found that org.mongodb.spark:mongo-spark-connector demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
Security News
The CNA Scorecard ranks CVE issuers by data completeness, revealing major gaps in patch info and software identifiers across thousands of vulnerabilities.
Research
/Security News
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.