
Research
Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.
sql-adaptor
Advanced tools
This is a repository that packages and exposes sql functions necessary as a standalone library
This is a repository that packages and exposes SQL functions necessary as a platform library
All basic SQL functions are exposed in lib/index.js
./startSQL.shnpm testWe've added a friendly escaping system! It can be used like so:
SQL.query(`
INSERT INTO items (type, count)
VALUES ($0, $1);
`, ['drug', 15])
This will insert { type: 'drug', count: 15 }.
Be sure to escape all values which may change in queries using this method! :)
To create a table the library accepts a JSON object with the key as the name of the field and the value as all other options that SQL accepts such as type, KEY, auto-increment etc. If there are multiple options it must be formatted correctly with spaces in between them and be in a single string.
To use this library you will need permissions to use Chronicled private npm registry. Once you have the credentials/token,
npm install @chronicled/sql-adaptor-jsFAQs
This is a repository that packages and exposes sql functions necessary as a standalone library
The npm package sql-adaptor receives a total of 4 weekly downloads. As such, sql-adaptor popularity was classified as not popular.
We found that sql-adaptor demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.