
Security News
/Research
Fake Corepack Site Distributes Infostealer and Proxyware to Developers
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.
@mypandora/query-builder
Advanced tools
pnpm add @mypandora/query-builder
<!-- 引入组件与样式 -->
import QueryBuilder from '@mypandora/query-builder';
import '@mypandora/query-builder/style.css';
export default {
name: 'Demo',
components: {
QueryBuilder,
}
...
}
<template>
<div id="app">
<query-builder :data.sync="treeData" :operatorText="operatorText">
<!-- 使用插槽添加自定义查询内容 -->
<!-- data 为当前数据;onUpdate 为更新数据方法,第一个参数为 key,第二个参数为 value -->
<template #default="{ data, onUpdate }">
<div class="item-nohover">
<span class="item-field">{{ data.name }}</span>
<el-select
class="item-op"
size="small"
:value="data.condition"
@change="(val) => onUpdate('condition', val)"
placeholder="请选择"
>
<el-option
v-for="item in conditionOptions"
:key="item.value"
:label="item.label"
:value="item.value"
></el-option>
</el-select>
<div class="item-value">
<el-input
:value="data.startValue"
@input="(val) => onUpdate('startValue', val)"
placeholder="请输入内容"
></el-input>
</div>
<div class="item-text">至</div>
<div class="item-value">
<el-input
:value="data.endValue"
@input="(val) => onUpdate('endValue', val)"
placeholder="请输入内容"
></el-input>
</div>
</div>
</template>
</query-builder>
</div>
</template>
[
{
// 组数据结构: operator: 操作符 isOpen: 是否展开 children: 子节点
operator: "or",
isOpen: true,
children: [
{
operator: "and",
isOpen: true,
children: [
{
// 插槽内容数据结构,请按你的插槽内容组织
name: "手机价格",
condition: "",
startValue: "",
endValue: "",
},
{
operator: "and",
isOpen: true,
children: [
{
name: "手机颜色",
condition: "",
startValue: "",
endValue: "",
},
{
name: "手机尺寸",
condition: "",
startValue: "",
endValue: "",
},
],
},
],
},
],
},
]
{
and: "且",
or: "或",
}
FAQs
### 使用方式
The npm package @mypandora/query-builder receives a total of 1 weekly downloads. As such, @mypandora/query-builder popularity was classified as not popular.
We found that @mypandora/query-builder demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.

Research
/Security News
A large-scale campaign abused GitHub Actions in compromised repositories to exploit CVE-2026-41940 in cPanel and WHM and steal server credentials.

Security News
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.