
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

DynamoDB NodeJS ORM, inspired by similar ORMs like Mongoose & Sequelize.
const dynazord = require('dynazord');
const users = dynazord.createModel({
tableName: 'dynazord-test-users',
keySchema: {
hash: 'email',
},
properties: {
email: {
type: String,
required: true,
},
name: {
type: String,
required: true,
},
avatar: {
type: String,
},
role: {
type: String,
enum: [ 'ADMIN', 'MODERATOR', 'EDITOR', 'USER' ],
default: () => 'USER',
},
},
});
const user = await users.create({
email: 'jdrydn@github.io',
name: 'James D',
avatar: 'https://github.com/jdrydn.png',
});
console.log(user);
// { email: 'jdrydn@github.io',
// name: 'James D',
// avatar: 'https://github.com/jdrydn.png'
// role: 'USER' }
const user = await users.get({ email: 'jdrydn@github.io' });
console.log(user);
// { email: 'jdrydn@github.io',
// name: 'James D',
// avatar: 'https://github.com/jdrydn.png'
// role: 'USER' }
const user = await users.update({ role: 'EDITOR' }, { email: 'jdrydn@github.io' });
console.log(user);
// { email: 'jdrydn@github.io',
// name: 'James D',
// avatar: 'https://github.com/jdrydn.png'
// role: 'EDITOR' }
const user = await users.delete({ email: 'jdrydn@github.io' });
console.log(user);
// true
This library is designed to simplify interaction with DynamoDB, offering more traditional CRUD methods instead of learning DynamoDB's getItem/putItem methods. You can also write functions to validate properties on objects & add other hooks to transform data to suit your needs.
$ npm install --save dynazord
master.amazon/dynamodb-local
docker run --rm -d --name dynamodb -p 8000:8000 amazon/dynamodb-local
Any questions or suggestions please open an issue.
FAQs
DynamoDB NodeJS ORM
The npm package dynazord receives a total of 2 weekly downloads. As such, dynazord popularity was classified as not popular.
We found that dynazord demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.