
Research
/Security News
npm Package Uses Prompt Injection and Token Flooding to Disrupt AI Malware Scanners
A new npm package tests AI malware scanners with prompt injection, safety-triggering comments, context flooding, and obfuscated JavaScript.
@prisma-next/plan
Advanced tools
Plan helpers, diagnostics, and shared errors for Prisma Next.
This package is part of the core ring and provides target-agnostic plan error helpers and error types. These utilities are used across all target families (SQL, document, etc.) for consistent error handling during plan construction and validation.
Provide shared plan error utilities that can be used by any target family without depending on target-specific types or implementations.
planInvalid, planUnsupported)RuntimeError)Non-goals:
flowchart TD
subgraph "Core Ring"
PLAN["@prisma-next/plan"]
end
subgraph "Consumers"
SQL[SQL Lanes]
DOC[Document Lanes]
RUNTIME[Runtime]
end
PLAN --> SQL
PLAN --> DOC
PLAN --> RUNTIME
errors.ts)planInvalid(message, details?, hints?, docs?): Creates a RuntimeError with code PLAN.INVALID for invalid plan operationsplanUnsupported(message, details?, hints?, docs?): Creates a RuntimeError with code PLAN.UNSUPPORTED for unsupported plan operationstypes.ts)RuntimeError: Interface for plan errors with standardized fields:
code: Error code (e.g., PLAN.INVALID, PLAN.UNSUPPORTED)category: Always 'PLAN' for plan errorsseverity: Always 'error'message: Human-readable error messagedetails: Optional structured detailshints: Optional array of hintsdocs: Optional array of documentation linksThis package has no dependencies - it's part of the innermost core ring and provides foundational error utilities.
This package follows the standard exports/ directory pattern:
src/exports/errors.ts - Re-exports error helpers (planInvalid, planUnsupported)src/exports/types.ts - Re-exports error types (RuntimeError)src/index.ts - Main entry point that re-exports from exports/This enables subpath imports like @prisma-next/plan/errors and @prisma-next/plan/types if needed in the future.
This package is part of the framework domain, core layer, shared plane:
packages/1-framework/1-core/shared/planFAQs
Plan helpers, diagnostics, and shared errors for Prisma Next
The npm package @prisma-next/plan receives a total of 186 weekly downloads. As such, @prisma-next/plan popularity was classified as not popular.
We found that @prisma-next/plan demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
A new npm package tests AI malware scanners with prompt injection, safety-triggering comments, context flooding, and obfuscated JavaScript.

Product
Socket now detects supply chain risks in project manifests, starting with missing lockfiles that can make dependency installs non-reproducible.

Research
/Security News
The trojanized extensions use TinyGo-compiled WebAssembly and Solana transaction memos to resolve command-and-control infrastructure.