
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
ew-action-mongodb
Advanced tools
Mongo Action connector for eWings framework
As previously mentioned, ewActionMongoDB is a plugin for the eWing framework. You can find more information at: eWings github page.
npm install --save ew-action-mongodb
ewActionMongoDB is fully tested. In includes:
npm test
eWing Mongo Action allows you to transform simple object event into complex mongoDB actions without loosing the control of your backend. This is specially usefull when you have an event based frontend like React or Polymer. A event processable by the eWing Mongo Action will look like:
{
"id" : 1,
"status" : "request",
"type" : "user/insert",
"owner" : "owner",
"payload": {
"name" : "john doe",
"age" : 25,
"status": "online"
}
};
This action will insert a new document in the user collection containing the data defined in the payload.
Every event must follow the following pattern in order to be processed by the eWing Mongo Action library:
const eventType = `${collection}/${action}/${parameter}`;
Collection and action are mandatory of the event type, while parametes is option. An action can only have one of the follow values:
In order to setup the eWing Mongo Action we need a connection to mongoDB and define the model behaviour.
const eWings = require('ewings');
const ewActionMongo = require('ew-action-mongodb');
const models = require('./models');
const db = require('db');
const config = {
db: db,
models: models,
}
const mongoAction = ewActionMongo(config);
const interfaces = [];
eWings.init(interfaces, [mongoAction]);
In order to setup the eWing Mongo Action we need a connection to mongoDB. This can be archived with the following code:
let db:
MongoClient.connect(MongoUrlConn, (err, client) => {
if (err) throw err;
db = client.db(dbName);
});
Note: You must user the version 3.0.0 or above of the mongodb native driver.
If you require extra instructions to setup you mongoDB connection, please check the official documentation of the mongodb project.
The model object defines all the collections that could be manipulated throw the eWing Mongo Action instance. This is an example:
const models = {
user: {
schema: userSchemaMock,
roles: roles
},
jobs: {
schema: jobsSchemaMock,
actions: ['find']
}
}
Each key of the models objects is refers to a collection. Each model object has 3 possible parameters:
Please read CONTRIBUTING.md for details on our code of conduct, and the process for submitting pull requests to us.
We use SemVer for versioning. For the versions available, see the tags on this repository.
This project is licensed under the MIT License - see the LICENSE file for details
We are still waiting for you ;)
FAQs
Mongo Action connector for eWings framework
The npm package ew-action-mongodb receives a total of 1 weekly downloads. As such, ew-action-mongodb popularity was classified as not popular.
We found that ew-action-mongodb demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.