
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@produce8/dynoraptor-cli
Advanced tools
The DynamoDB Migrations Tool Command Line Interface (CLI).
Make sure you have AWS-SDK installed and configured properly. Then install the Dynamit CLI to be used in your project with
$ npm install --save-dev @produce8/dynoraptor-cli
And then you should be able to run the CLI with
$ npx dynoraptor --help
Migration records are supposed to be stored in the DynamoDB table with the table-name
("migrations"
by default) and primary key attribute-name
("name"
by default) defined as optional cli options. The tool cannot create the table for you yet, so make sure you created it properly. See Creating a Table Developer Guide
There are two patterns of use for this tool. Configuration can be provided via the command line arguments, or with the use of
a .env
file. E.g:
MIGRATIONS_PATH=migrations
AWS_ACCESS_KEY=YOUR_AWS_ACCESS_KEY
AWS_SECRET_KEY=YOUR_AWS_SECRET_KEY
AWS_REGION=us-west-2
DYNAMO_ENDPOINT_URL=YOUR_DYNAMO_ENDPOINT
MIGRATION_TABLE_NAME=migrations
MIGRATION_PRIMARY_KEY=name
TYPESCRIPT=false
npx dynoraptor [command]
Commands:
dynoraptor migrate Run pending migrations
dynoraptor migrate:status List the status of all migrations
dynoraptor migrate:undo Reverts a migration
dynoraptor migrate:undo:all Revert all migrations ran
dynoraptor migration:generate Generates a new migration file [aliases: migration:create]
Options:
--version Show version number [boolean]
--help Show help [boolean]
FAQs
The DynamoDB migrations tool CLI
We found that @produce8/dynoraptor-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.