
Security News
OpenClaw Skill Marketplace Emerges as Active Malware Vector
Security researchers report widespread abuse of OpenClaw skills to deliver info-stealing malware, exposing a new supply chain risk as agent ecosystems scale.
mongo-query
Advanced tools
Component that implements the complete MongoDB query JSON API to operate on individual documents.
Component that implements the complete MongoDB query JSON API to operate on individual documents.
var query = require('mongo-query');
// our sample document
var obj = {
name: 'Tobi',
age: 8,
location: { country: 'Canada', zip: 123 }
likes: [{ id: 1, name: 'Food' }, { id: 2, name: 'Stuff' }]
};
// run an operation and get changes
var changes = query(obj, { $set: { 'location.country': 'US' } });
change objects.
modifier on obj provided they match filter.strict if true, only modifies if filter has a match (false).Returns a Query object to perform tests on.
Example: query.filter({ a: { $gt: 3 } }).test({ a: 1 }). For the
complete filter API refer to
filtr.
Gets the key from the given obj, which can use dot
notation.
Example: query.get(obj, 'some.key').
Sets the key on obj with the given val. Key can use dot
notation.
All change objects contain:
key: the key that was affected. If the positional operator was used,
the key is rewritten with dot notation (eg: comments.3.date).op: the type of operation that was performedDepending on the type of operation they can contain extra fields.
value that we setvalue value that we increment byvalue value that was poppedshift if true, it was a shift instead of a popvalue new namevalue value that was pushedvalue array of values that were pushedvalue array of values that were pulledvalue array of values that were pulledvalue (undefined)value array of values that were addedFAQs
Component that implements the complete MongoDB query JSON API to operate on individual documents.
The npm package mongo-query receives a total of 385 weekly downloads. As such, mongo-query popularity was classified as not popular.
We found that mongo-query demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Security researchers report widespread abuse of OpenClaw skills to deliver info-stealing malware, exposing a new supply chain risk as agent ecosystems scale.

Security News
Claude Opus 4.6 has uncovered more than 500 open source vulnerabilities, raising new considerations for disclosure, triage, and patching at scale.

Research
/Security News
Malicious dYdX client packages were published to npm and PyPI after a maintainer compromise, enabling wallet credential theft and remote code execution.