
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@breadcrumb-sh/cli
Advanced tools
CLI for Breadcrumb: database migrations for the
Breadcrumb schema. Installs the breadcrumb command.
npm i -D @breadcrumb-sh/cli
# or run without installing:
npx breadcrumb <command>
breadcrumb migrateApplies the Breadcrumb schema directly to your database, creating tables and adding any missing columns.
breadcrumb migrate [--database <url|path>]
The target comes from --database, or $DATABASE_URL if omitted. A
postgres:// or postgresql:// URL uses the Postgres adapter; anything else is
treated as a SQLite file path.
breadcrumb migrate --database postgres://user:pass@localhost:5432/app
breadcrumb migrate --database ./prod.db
DATABASE_URL=postgres://… breadcrumb migrate
breadcrumb generateWrites a reviewable .sql migration file instead of touching your database.
Commit it and apply it with your own tooling.
breadcrumb generate [--database <url|path>] [--dialect postgres|sqlite] \
[--out <dir>] [--name <name>]
| Flag | Default | Description |
|---|---|---|
--database | $DATABASE_URL | Diff against a live database, emitting only the delta. |
--dialect | none | Emit a fresh full schema when no database is given (postgres or sqlite). |
--out | ./breadcrumb/migrations | Output directory. |
--name | breadcrumb | Filename suffix. |
Pass either --database (to diff a live DB) or --dialect (for a fresh
schema). Files are named <timestamp>_<name>.sql.
# Fresh schema for a new Postgres database
breadcrumb generate --dialect postgres
# Delta against a live database, custom name and dir
breadcrumb generate --database $DATABASE_URL --name init --out ./db/migrations
MIT
FAQs

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.