
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
connect-mongoskin
Advanced tools
Simple Session Store for Connect() Framework session Middleware that leverages an existing connection from MongoSkin
We were using a connect-mongodb
which was working great, however we want to keep our connection pool centralized,
have the benefits that an abstraction layer like mongoskin provides and avoid going twice through the pain
of getting our ReplSetCluster configuration in place.
Use git clone
to download the source and make it available in your project wirh npm link
.
or
npm install connect-mongoskin
This session store is build to work with Connect() Framework / ExpressJS() Framework / RailwayJS() Framework Use it like any other middleware.
The lib reuses an existing client, so pass in the SkinDb and options if needed.
var SkinStore = new SkinStore(`db`, `options`[, callback]);
var express = require('express'),
db = require('mongoskin').db(`your_connection_here`),
SkinStore = require('connect-mongoskin');
var app = express.createServer();
app.use(express.cookieParser());
app.use(express.session({cookie: { secure: false, maxAge:86400000 }, store: new SkinStore(`db`)}));
Originally written by @johnnyhalife (johnny at mural.ly)
FAQs
Connect's durable sessions middleware backed by MongoSkin
The npm package connect-mongoskin receives a total of 15 weekly downloads. As such, connect-mongoskin popularity was classified as not popular.
We found that connect-mongoskin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.