
Security News
/Research
Popular node-ipc npm Package Infected with Credential Stealer
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.
@saasak/tool-supa
Advanced tools
This is simple (albeit still barebone)
"db:deploy": "supa deploy" to your package.json at root"db:seed": "supa seed" to your package.json at root"db:extensions": "supa ext" to your package.json at root
And finally,"db:reset": "supabase start && supabase db reset && pnpm -s run db:extensions && pnpm -s run db:seed" to it too !You'll obviously need to leave out the default seeding script seed.sql inside your supabase directory.
Inside your supabase directory, you will need:
_enable.sql file will be executed first to know if the extension needs to run again. There is a --force flag to supa ext which allows to disregard the result of this script. This script must return true if the extension is already installed, and false if not.pg library instead of the psql binary, making it more portable and easier to deploy.--debug - Enable debug output for all commands--force - Force execution (for extensions, disregards enable check)FAQs
A small util to manage supabase
We found that @saasak/tool-supa demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.

Security News
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.