Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
This library allows to perform async read/write queries to cartodb.
npm install cartodb
The library provides two auth ways, oauth client and api key client. Both have the same funcionallity and you should choose one of them depending on you requirements.
var CartoDB = require('cartodb');
var secret = require('./secret.js');
/* you could change this providing an api_key instead of consumer key / secret if you want to use oath
client = new CartoDB({
user: secret.USER,
password: secret.password,
consumer_key: secret.CONSUMER_KEY,
consumer_secret: secret.CONSUMER_SECRET
});
*/
var client = new CartoDB({user: secret.USER,api_key: secret.API_KEY});
client.on('connect', function() {
console.log("connected");
// template can be used
client.query("select * from {table} limit 5", {table: 'tracker'}, function(err, data){
// JSON parsed data or error messages are returned
})
// chained calls are allowed
.query("select * from tracker limit 5 offset 5", function(err, data){});
});
// client is a Stream object instance so you can pipe responses as new line delimited JSON, for example, to a file
var output = require('fs').createWriteStream(__dirname + '/responses.log');
client.pipe(output);
client.connect();
CartoDB-nodejs implements visionmedia's debug library. You can see what's happening with the requests via an environment variable
DEBUG=cartodb node yourscript.js
FAQs
CartoDB Node.js library
The npm package cartodb receives a total of 33 weekly downloads. As such, cartodb popularity was classified as not popular.
We found that cartodb demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.