Research
/Security News
Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages
Miasma Mini Shai-Hulud hits @immobiliarelabs Backstage plugins, targeting GitLab and LDAP auth packages on npm.
By Socket Research Team - Jun 26, 2026
🚀 Socket Launch Week Day 5:Introducing Repository Access Permissions and Custom Roles.Learn more →
@nexus_js/bridge-postgres
Advanced tools
@nexus_js/bridge-postgres
Nexus Bridge Postgres connector — secure schema discovery via information_schema
@nexus_js/bridge-postgres
Postgres schema discovery connector for Nexus Bridge.
Usage
Set an environment variable with a read-only DSN:
BRIDGE_POSTGRES_URL=postgres://...
Then run:
nexus bridge add postgres --dsn-env BRIDGE_POSTGRES_URL --schema publicnexus bridge discover
Security
- Introspection uses
information_schema(schema-only). - Connection defaults are conservative (single connection, timeouts).
FAQs
Nexus Bridge Postgres connector — secure schema discovery via information_schema
The npm package @nexus_js/bridge-postgres receives a total of 36 weekly downloads. As such, @nexus_js/bridge-postgres popularity was classified as not popular.
We found that @nexus_js/bridge-postgres demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Package last updated on 05 Jun 2026
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Related posts
Security News
Rolldown Pulls Rust React Compiler Integration After Binary Size Increase
Rolldown paused Rust React Compiler integration after a 5MB binary size increase raised concerns about shipping React-specific code to all Vite users.
By Sarah Gooding - Jun 26, 2026
Security News
/Research
Miasma Mini Shai-Hulud Hits LeoPlatform npm Packages and GitHub Actions, Expands to the Go Ecosystem
Mini Shai-Hulud expands into the Go ecosystem after hitting LeoPlatform npm packages and targeting GitHub Actions workflows.
By Socket Research Team - Jun 25, 2026