
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
loopback-console-cs
Advanced tools
A command-line tool for Loopback app debugging and administration with coffee-script
A command-line tool for Loopback app debugging and administration with CoffeeScript.
The loopback-console-cs is a command-line tool for interacting with your Loopback app. It works like the built-in CoffeeScript REPL, but provides a handful of features that are helpful when debugging or generally working within your app's environment. Features include,
The console can be used easily by just installing it and running its binary:
npm install loopback-console-cs --save
$(npm bin)/loopback-console-cs
Assuming you install it within your project, the default setup will detect your project's location and bootstrap your app based on your current working directory. if you'd instead like to load a specific app in the console, execute it with a path to the app's main script:
loopback-console-cs [path/to/server/server.js]
The recommended configuration is to add the console to your package.json scripts, as follows:
"scripts": {
"console": "loopback-console-cs"
}
Once added you may launch the console by running,
npm run console
The loopback-console-cs makes it easy to work with your Loopback models.
loopback > .models
User, AccessToken, ACL, RoleMapping, Role, Widget
loopback > Widget.count()
0
loopback > Object.keys Widget.definition.properties
[ 'name', 'description', 'created', 'id' ]
loopback > w = Widget.create name: 'myWidget01', description: 'My new Widget'
{ name: 'myWidget01', description: 'My new Widget', id: 1 }
loopback > Widget.count()
1
loopback > w.name = 'super-widget'
'super-widget'
loopback > w.save()
{ name: 'super-widget', description: 'My new Widget' }
loopback > Widget.find()
[ { name: 'super-widget', description: 'My new Widget', id: 1 } ]
# Enter multiline mode with either Ctrl + V (OSX) or Win + V (Windows
........ > AccessToken.find().then (tokens) ->
........ > console.log tokens
........ >
........ > AccessToken.deleteById(tokens[0].id).then (res) ->
........ > console.log 'token deleted', res
# Finish and exit multiline mode with either Ctrl + V (OSX) or Win + V (Windows
By default the loopback-console-cs provides a few handles designed to make it easier to work with your project,
User. Type .models to see a list.app: The Loopback app handle.cb: A simplified callback function that,
function (err, result)result handle.console.error and results with console.logresult: The storage target of the cb functionIn some cases you may want to perform operations each time the console loads to better integrate it with your app's environment.
To integrate loopback-console-cs with your app the following additions must be made
to your app's server/server.js file,
LoopbackConsole = require 'loopback-console-cs'# LoopbackConsole.activated() checks whether the conditions are right to launch
# the console instead of the web server. The console can be activated by passing
# the argument --console or by setting env-var LOOPBACK_CONSOLE=1
if LoopbackConsole.activated()
LoopbackConsole.start app,
prompt: "my-app # "
# Other REPL or loopback-console-cs config
else if require.main is module
app.start()
By integrating the loopback-console-cs you also gain the ability to configure its functionality. The following configuration directives are supported,
quiet: Suppresses the help text on startup and the automatic printing of result.historyPath: The path to a file to persist command history. Use an empty string ('') to disable history.prompt.handles: Disable any default handles, or pass additional handles that you would like available on the console.Note, command history path can also be configured with the env-var LOOPBACK_CONSOLE_HISTORY.
A Special thanks to Heath Morrison (doublemarked) for creating loopback-console which this is based on.
loopback-console-cs uses the MIT license. See LICENSE for more details.
FAQs
A command-line tool for Loopback app debugging and administration with coffee-script
The npm package loopback-console-cs receives a total of 0 weekly downloads. As such, loopback-console-cs popularity was classified as not popular.
We found that loopback-console-cs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.