
Threat Research
/Security News
Searchjacked: Hidden Browser Extensions Hijack Searches for 13 Million Users
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.
@mcpolyglot/connector-sql
Advanced tools
Shared SQL connector for mcpolyglot with Postgres, MySQL/MariaDB, and SQLite dialects. Read-only-by-default with per-dialect enforcement.
SQL connector for mcpolyglot. One package, three dialects: Postgres, MySQL/MariaDB, and SQLite. Read-only by default with per-dialect enforcement at the database boundary.
For every SQL source mcpolyglot generates:
<id>.list_tables — every table across non-system schemas, with columns.<id>.describe_table — one table's columns, types, and primary key.<id>.query — read-only SQL with parameterized args, row cap, and timeout.(Opt-in per-table tools like users.find_by_email are scaffolded by mcpolyglot init and land fully in Wave 3.)
| Dialect | Enforcement |
|---|---|
| Postgres | BEGIN READ ONLY transaction; rolled back at the end of every call. |
| SQLite | PRAGMA query_only = 1; database opened read-only when possible. |
| MySQL | AST gate (node-sql-parser mysql grammar) + SET SESSION TRANSACTION READ ONLY + MAX_EXECUTION_TIME hint. |
The AST gate matters on MySQL because SET TRANSACTION READ ONLY is partially honored — the parser refuses anything whose top-level statement isn't a read.
The dialect drivers (pg, mysql2, better-sqlite3) are declared as optionalDependencies. Install only what you use.
MIT licensed.
FAQs
Shared SQL connector for mcpolyglot with Postgres, MySQL/MariaDB, and SQLite dialects. Read-only-by-default with per-dialect enforcement.
The npm package @mcpolyglot/connector-sql receives a total of 15 weekly downloads. As such, @mcpolyglot/connector-sql popularity was classified as not popular.
We found that @mcpolyglot/connector-sql demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.

Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.