Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Curate makes it easy to quickly expose database queries to an express-api. It also features a client component that makes it easy to consume those API methods.
It works especially well with modella and chino.
app.js
var app = express(),
curate = require('curate');
curate.app = app;
curate.namespace = 'api/v1'
user-model/server.js
var curate = require('curate'),
db = require('mong')('localhost/db');
var User = module.exports = function(attrs) {
this.username = attrs.username;
this.password = attrs.password;
this.email = attrs.email;
}
User.allUsers = function(cb) {
db.get('users').find({}, cb);
}
curate('users/all', User.allUsers);
You can now visit http://localhost/api/v1/users/all
and get JSON of the users
returned by the User.allUsers
query.
Curate also provides easy consumption of the generated API.
user-model/client.js
var curate = require('curate');
var User = module.exports = function() {
}
User.allUsers = curate('users/all', User);
This maps the client-side User.allUsers to hit /api/v1/users/all
and use the
resulting JSON in a callback. The resulting function has the same fingerprint as
the server-side function. It expects a cb(err, results)
for its argument.
The second argument passes the JSON returned into a constructor. ie. Instead of passing just JSON in, it will pass the JSON to the constructor to make full-fledged objects.
Sometimes you don't want the raw-db exposed to the client. For this, you can
specify the filter method in the app.js
For example:
var app = express(),
curate = require('curate');
curate.app = app;
curate.filterMethod = 'filter';
Now, if an instance has a method named filter
it will call it and only pass
the results of that method into the exposed API.
FAQs
API Manufacturer for Query Objects
The npm package curate receives a total of 0 weekly downloads. As such, curate popularity was classified as not popular.
We found that curate demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.