
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
mgnlq_parser1
Advanced tools
Parse sentences into actions or queries
Parser for queries List all CAT CAT where CAT FACT = XX in DOM
npm i
gulp
recognition for mongo nlq
entity recognition based on word categorization
the word categorization contains a bitmap filter to retain only sencences which are homogeneous in one domain
entity recognition based on word categorization
Words are categorized according to an index (see mgnlq-model)
into
The word categorization contains a bitmap filter to retain only sencences which are homogeneous in one domain.
The word index is built by mgnlq_model
usage:
var erbase = require('mgnlq_parser1');
var words = {}; // a cache!
var res = Erbase.processString('orbit of the earth', theModel.rules, words);
gulp makeTokenFiltering elements in an array
db.test.aggregate([ // Get just the docs that contain a shapes element where color is 'red' {$match: {'shapes.color': 'red'}}, {$project: { shapes: {$filter: { input: '$shapes', as: 'shape', cond: {$eq: ['$$shape.color', 'red']} }}, _id: 0 }} ])
db.coll.aggregate( [ { "$match": { "_id": "123456" } }, { "$project": { "detailLine": { "$map": { "input": "$detailLine", "as": "dline", "in": { "amount": "$$dline.value.detailLineCharges.allowedAmount.amount", "reasonCode": "$$dline.value.detailLineCharges.allowedAmount.reasonCode" } } } }} ] )
the default model name is "testmodel"
environment ABOT_MONGODB controls the used model, e.g. ABOT_MONGODB=testdb2
set MONGO_RECORD_REPLAY=
the tests run against recorded data in E:\projects\nodejs\botbuilder\mgnlq_testmodel_replay\mgrecrep\data\807d3ce983c2f3....
This data can be recorded by setting
SET MGNLQ_MODEL_NO_FILECACHE=1 SET MGNLQ_TESTMODEL_REPLAY=OFF | RECORD | REPLAY (default)
more than N CAT (List all Application Components with more than 3 Fiori Apps)
real or
associativity, parentheis
and CATA FACT_A or CATB FACTB => (( CAT_A )
CAT_A FACT_A OR FACT_A AND XX = ( CAT_A FACT_A or CAT_A FACT_B )
(FACT_A OR FACT_B ) OR X AND
FA AND FB OR FC AND FE => FA AND ( FB OR FC) AND FA
FAQs
query parsing conversion to mongoose queries
We found that mgnlq_parser1 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.