
Research
/Security News
Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.
mysql-all-in-one
Advanced tools
A package that allows you to have a complete interaction with a MYSQL database, allowing to connect to the database, retrieve data and create queries.
All tools to connect, execute commands and build raw queries for Mysql databases.
It's safe, fast and easy to implement. This package is a Wrapper around mysql2 package
Installation is done using the npm install command:
$ npm install mysql-all-in-one
SELECT, INSERT, UPDATE, DELETE and UPSERT;Data access object (DAO) will connect to the database and execute commands (as prepared statements by default).
const { DataAccessObject } = require('mysql-all-in-one');
const dao = new DataAccessObject({
host: 'localhost',
user: 'root',
password: '1234',
port: 3306,
database: 'test_database',
});
const main = async () => {
const result = await dao.select({ from: 'my_table' });
console.log(result); //Will list all rows from a table "my_table" located at a database "test_database"
};
main();
Query builder simply returns Mysql Query commands as string. (This module is used by DataAccessObject to build queries).
const { QueryBuilder } = require('mysql-all-in-one');
// OR
// const QueryBuilder = require('mysql-all-in-one/QueryBuilder');
const query = QueryBuilder.select({ from: 'my_table', where: { id: 1 } });
console.log(query);
// >>> SELECT `my_table`.* FROM `my_table` WHERE (`my_table`.`id` = 1);
DataAccessObject uses QueryBuilder under the hood. So for example, everything that works on the method select from QueryBuilder also works on select command from DataAccessObject.
Simple where object:
dao.select({
from: 'table_user',
where: {
name: { like: 'foo' },
id: 1,
active: null,
permission: {isnot: null}
},
});
Or between conditions:
dao.select({
from: 'table_user',
where: {
__or: true, // All conditions inside this object will use OR between them.
id: 1,
active: 1,
},
});
Array with multiple objects:
dao.select({
from: 'table_user',
where: [
'__or', // If first position is "__or" all conditions inside this array will use OR between them.
{ id: 1, },
{ id: 2, },
]
});
Complex nesting to achieve any AND/OR relation needed:
dao.select({
from: 'table_user',
where: [
'__or',
[ // Unlimited nestings are possible, allowing to create any condition combination
[ // Every array or object will be inside it's own bracket.
'__or',
{
name: { like: 'foo_bar' },
id: 4,
},
],
{name: { like: 'bar' },}
],
{
name: { like: 'foo' },
id: 1,
active: null,
permission: {isnot: null}
},
{
id: 2,
}
]
});
Custom SQL Expressions is also allowed:
const { sqlExpression } = QueryBuilder;
const name = 'john';
const birth = new Date(2002, 8, 30);
dao.select({
from: 'table_user',
where: [
// Also accepts sqlExpression objects to create custom where commands (automatically escape variables).
sqlExpression`table_user.name LIKE ${name}`, // >>> table_user.name LIKE "john"
sqlExpression`table_user.birthdate = ${birth}`, // >>> table_user.birthdate = '2002-09-30 00:00:00.000'
],
});
FAQs
A package that allows you to have a complete interaction with a MYSQL database, allowing to connect to the database, retrieve data and create queries.
We found that mysql-all-in-one demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.

Research
/Security News
Docker and Socket have uncovered malicious Checkmarx KICS images and suspicious code extension releases in a broader supply chain compromise.

Product
Stay on top of alert changes with filtered subscriptions, batched summaries, and notification routing built for triage.