
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
discord-data
Advanced tools
A simple/joke package to use Discord channels as a key-value database.
⚠️ This is not meant to be used in production apps like Discord.JS bots, only in prototypes, using this as a database in an active bot will get you ratelimited constantly. ⚠️
npm install discord-data
import DiscordDB from "discord-data";
or
const DiscordDB = require("discord-data");
const client = new DiscordDB({
token: "DISCORD_BOT_TOKEN_HERE",
guildId: "GUILD_ID_HERE"
});
client.login().then(() => console.log("Connected!")) // Required before running any queries.
To create a collection, create a category in your guild prefixed with DB_, anything after the underscore is the collection name. These methods are all asynchronous and return promises.
(async () => {
// Category is named db_users
await client.create("users", { key: "admin", username: "admin", password: "123" }); // Creates a channel in the users collection with the provided JSON data.
const data = await client.find("users", "admin"); // Returns the parsed JSON data from the above entry.
console.log(data)
const success = await client.delete("users", "admin");
console.log(success) // Truthy if an entry was deleted, falsy otherwise.
console.log(client.getCollections()) // Simply returns the array of loaded collections, or an empty array if not yet connected.
})()
FAQs
A simple/joke package to use Discord channels as a database.
We found that discord-data demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.