
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
A MongoDB to Elasticsearch connector
npm i -g mongo-es
# normal mode
mongo-es ./config.json
# debug mode, with debug info printed
NODE_ENV=dev mongo-es ./config.json
const fs = require('fs')
const Redis = require('ioredis')
const { Config, Task, run } = require('mongo-es')
const redis = new Redis('localhost')
Task.onSaveCheckpoint((name, checkpoint) => {
return redis.set(`mongo-es:${name}`, JSON.stringify(checkpoint))
})
// this will overwrite task.from in config file
Task.onLoadCheckpoint((name) => {
return redis.get(`mongo-es:${name}`).then(JSON.parse)
})
run(new Config(fs.readFileSync('config.json', 'utf8')))
scan entire database for existed documents
tail the oplog for documents' create, update or delete
Structure:
{
"controls": {},
"mongodb": {},
"elasticsearch": {},
"tasks": [
{
"extract": {},
"transform": {},
"load": {}
}
]
}
mongodbReadCapacity - Max docs read per second (default: 10000). (optional)elasticsearchBulkInterval - Max bluk interval per request (default: 5000). (optional)elasticsearchBulkSize - Max bluk size per request (default: 5000). (optional)indexNameSuffix - Index name suffix, for index version control. (optional)url - The connection URI string, eg: mongodb://user:password@localhost:27017/db?replicaSet=rs0.
notice: must use a admin user to access oplog.options - Connection settings, see: MongoClient. (optional)options - Elasticsearch Config Options, see: Configuration.indices - If set, auto create indices when program start, see: Indeces Create. (optional)phase - scan or tailtime - tail oplog with query: { ts: { $gte: new Timestamp(0, new Date(time).getTime() / 1000) } }id - scan collection with query { _id: { $gte: id }}db - Database name.collection - Collection name in database.projection - Projection selector, see Projection.mapping - The field mapping from mongodb's collection to elasticsearch's index.parent - The field in mongodb's collection to use as the _parent in elasticsearch's index. (optional)index - The name of the index.type - The name of the document type.body - The request body, see Put Mapping.FAQs
A MongoDB to Elasticsearch connector
The npm package mongo-es receives a total of 2 weekly downloads. As such, mongo-es popularity was classified as not popular.
We found that mongo-es demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.