Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@grammyjs/storage-prisma
Advanced tools
Storage adapter that can be used to store your session data with Prisma when using sessions.
npm install @grammyjs/storage-prisma --save
You can check the examples folder, or simply use followed code:
Implement the Session model in your Prisma schema:
model Session {
id Int @id @default(autoincrement())
key String @unique
value String
}
The
id
field is not needed for this adapter to work.The only restriction is that
key
must be aString
index, either by adding the@unique
keyword or the@id
keyword, andvalue
must be aString
.
Generate Prisma client using the terminal:
npx prisma generate
Migrate the schema changes to your database:
npx prisma db push
# or
npx prisma migrate dev
Create bot and pass adapter as storage:
import { Bot, Context, session, SessionFlavor } from "grammy";
import { PrismaAdapter } from "@grammyjs/storage-prisma";
import { PrismaClient } from "@prisma/client";
// Create Prisma client
const prisma = new PrismaClient();
// write session types
interface SessionData {
counter: number;
}
// create context for grammy instance
type MyContext = Context & SessionFlavor<SessionData>;
// Create bot and register session middleware
async function bootstrap() {
const bot = new Bot<MyContext>("");
bot.use(
session({
initial: () => ({ counter: 0 }),
storage: new PrismaAdapter(prisma.session),
})
);
// Register your usual middleware, and start the bot
bot.command("stats", (ctx) =>
ctx.reply(`Already got ${ctx.session.counter} photos!`)
);
bot.on(":photo", (ctx) => ctx.session.counter++);
bot.start();
}
FAQs
Prisma storage for grammY
The npm package @grammyjs/storage-prisma receives a total of 177 weekly downloads. As such, @grammyjs/storage-prisma popularity was classified as not popular.
We found that @grammyjs/storage-prisma demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.