
Research
/Security News
Contagious Interview Campaign Escalates With 67 Malicious npm Packages and New Malware Loader
North Korean threat actors deploy 67 malicious npm packages using the newly discovered XORIndex malware loader.
couchdb-mkuser
Advanced tools
Utility to create couchdb users easier.
In couchdb it's a common pattern to create a user with a database to store user-private data. Due to the lack of read access control of documents. This module makes it easy to create such a setup.
Use the following code to create a user and a database for the user.
mkuser('org.couchdb.user:userwithdb', {
name: 'userwithdb',
type: 'user',
roles: [],
password: 'super-secret'
}, {
database: 'userdb',
// All options except `security` and `database` are passed to request. See
// https://github.com/request/request.
baseUrl: 'http://localhost:5984',
})
.on('error', err => {
throw err;
})
.on('response', r => {
// Do something with the response. E.g. pipe it down to the client. In
// this case it should be a 200 since the last action is the PUT to
// /userdb/_security which should result in a 200.
});
You can also leave out the database option to create a user document only.
The id
is the document-id of the user. As of current couchdb versions it must
start with org.couchdb.user:
. user
is the userobject to store.
opts
is an object of options described below:
database
optional The name of the database to create for the user.
Leave this undefined if you don't want a database to be created.security
optional The security object to associate with the database.
Default is
security: {
admins: {
names: [<user-name>], groups: []
},
members: {
names: [], groups: []
}
},
All other options are passed to request.
FAQs
Utility to create couchdb users easier.
The npm package couchdb-mkuser receives a total of 8 weekly downloads. As such, couchdb-mkuser popularity was classified as not popular.
We found that couchdb-mkuser demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
North Korean threat actors deploy 67 malicious npm packages using the newly discovered XORIndex malware loader.
Security News
Meet Socket at Black Hat & DEF CON 2025 for 1:1s, insider security talks at Allegiant Stadium, and a private dinner with top minds in software supply chain security.
Security News
CAI is a new open source AI framework that automates penetration testing tasks like scanning and exploitation up to 3,600× faster than humans.