
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
dynamo-helper
Advanced tools
This is a tiny module that eases calls to DynamoDB. It includes only the most frequently-used calls I make, along with configuration I often use. Could be useful for someone else, but I'm hosting it here for easier installation and updates between projects. :)
const DynamoHelper = require('dynamo-helper');
DynamoHelper.scan(...);
DynamoHelper.add(...);
DynamoHelper.get(...);
DynamoHelper.delete(...);
npm install dynamo-helper
Calls update
for an item. It crafts the UpdateStatement
based on the keys and values of the object
parameter.
Parameters:
tableName
(String)idProperty
(String) - The name of the hash field.idValue
(String) - The actual value of the id.object
(Map) - The object to insert or update.Returns:
Promise(item)
- A promise which will resolve with the added item, or an error if one occurred.
Scans a given table. Optionally accepts an index name and filters. Currently does not support paging.
Parameters:
tableName
(String)indexName
(String, optional) - A secondary index to use.filters
(Map, optional) - The filters to be added to FilterExpression
and ExpressionAttributeValues
.projection
(String, optional) - A ProjectionExpression
to filter result columns.Returns:
Promise({
items: [...],
count:
})
The items are an array of scanned rows (which may be filtered). The count
represents the TotalCount.
Get by id.
Parameters:
tableName
(String)idProperty
(String) - The name of the hash field.idValue
(String) - The actual value of the id.Returns:
Promise(item)
- A promise which will resolve with the item or null
(if none was found).
Delete by id.
Parameters:
tableName
(String)idProperty
(String) - The name of the hash field.idValue
(String) - The actual value of the id.Returns:
Promise(item)
- A promise which will resolve with the deleted item.
FAQs
Easy DynamoDB helper
The npm package dynamo-helper receives a total of 0 weekly downloads. As such, dynamo-helper popularity was classified as not popular.
We found that dynamo-helper demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.