Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
This library allows to perform async read/write queries to cartodb.
npm install cartodb
The library provides two clents, oauth client and api key client. Two clients basically have the same funcionallity and you should choose one of them depending on you requirements.
var cartodb = require('cartodb');
var secret = require('./secret.js');
/* you could change this by CartoDBClient if you want to use oath
client = new cartodb.CartoDBClient(
secret.USER,
secret.password,
secret.CONSUMER_KEY,
secret.CONSUMER_SECRET);
*/
var client = new cartodb.CartoDBClientApiKey(secret.USER, secret.API_KEY);
client.on('connect', function() {
console.log("connected");
});
// this is not required for ApiKey client
// if you dont call client.connect the connection will not be persistent
// so the process will finish after the two request finish
client.connect();
client.on('data', function(data) {
var results = JSON.parse(data);
console.log(results.rows);
});
client.on('error', function(err) {
console.log("some error ocurred");
});
// request two queries
client.sql("select * from tracker limit 5");
client.sql("select * from tracker limit 5 offset 5");
// the process will not finish here if client connection is persistent
be careful with nodejs version you are using, there are some problems with https module in 0.4.8 version https://github.com/joyent/node/issues/728
FAQs
CartoDB Node.js library
The npm package cartodb receives a total of 33 weekly downloads. As such, cartodb popularity was classified as not popular.
We found that cartodb demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.