Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Dump Mysql, Postgres, and SQLServer databases directly to AWS S3 or Google Cloud Storage
Dump MySQL, PostgreSQL, or SQLServer database tables directly to local (compressed) JSON, Amazon Web Services (AWS) S3, Google Cloud Storage (GCS), or another database.
Either --sourceType
or --sourceFile
and --targetType
or --targetFile
are required. Other options can be shortened, e.g --user
instead of --sourceUser
. Unless a database-to-database requires both --sourceUser
and --targetUser
are required.
dbcp
pipes Readable Node.JS streams to Writable streams. No intermediate storage is required.
$ npm init
$ npm install dbcp
$ ./node_modules/.bin/dbcp \
--sourceType mssql --host localhost --dbname mymsdb --port 1433 \
--user SA --password "MyP@ssw0rd#" \
--table foobar --targetFile file.json.gz
$ ./node_modules/.bin/dbcp \
--sourceType postgresql --host localhost --dbname postgres --port 5433 \
--user postgres --password postgres \
--table foobar --targetFile gs://bucket/file.json.gz
$ ./node_modules/.bin/dbcp \
--sourceType mysql --host localhost --dbname mydb --port 8083 \
--user root --password wp \
--table foobar --targetFile s3://bucket/object.json.gz
$ ./node_modules/.bin/dbcp --help
Options:
--help Show help [boolean]
--version Show version number [boolean]
--dbname Database [string]
--format [choices: "json", "jsonl", "ndjson"] [default: "json"]
--host Database host [string]
--password Database password [string]
--port Database port [string]
--sourceFile Source file [string]
--sourceHost Source host [string]
--sourceName Source database [string]
--sourcePassword Source database password [string]
--sourcePort Source database port [string]
--sourceTable Source database table [string]
--sourceType Source database type
[string] [choices: "postgresql", "mssql", "mysql"]
--sourceUser Source database user [string]
--table Database table [string]
--targetFile Target file [string]
--targetHost Target host [string]
--targetName Target database [string]
--targetPassword Target database password [string]
--targetPort Target database port [string]
--targetTable Target database table [string]
--targetType Target database type
[string] [choices: "postgresql", "mssql", "mysql"]
--targetUser Target database user [string]
--user Database user [string]
FAQs
Dump Mysql, Postgres, SQLServer, and ElasticSearch databases directly to AWS S3, Google Cloud Storage, or Azure.
The npm package dbcp receives a total of 10 weekly downloads. As such, dbcp popularity was classified as not popular.
We found that dbcp demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.