
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
vmoo-mcp-database-server
Advanced tools
VMOO数据库MCP服务器 - 支持开发和生产环境的安全数据库访问
# 开发环境
npx vmoo-mcp-database-server@latest --env=dev
# 生产环境
npx vmoo-mcp-database-server@latest --env=prod
# 配送测试站
npx vmoo-mcp-database-server@latest --env=deliver
# 商户Cookie管理
npx vmoo-mcp-database-server@latest --env=merchant
{
"mcpServers": {
"vmoo-database-dev": {
"command": "npx",
"args": ["vmoo-mcp-database-server@latest", "--env=dev"],
"env": {
"V_MOO_PASSWORD": "xxxxxxxxxxxxx"
}
},
"vmoo-database-prod": {
"command": "npx",
"args": ["vmoo-mcp-database-server@latest", "--env=prod"],
"env": {
"V_MOO_PASSWORD": "xxxxxxxxxxxxx"
}
},
"vmoo-database-deliver": {
"command": "npx",
"args": ["vmoo-mcp-database-server@latest", "--env=deliver"],
"env": {
"DELIVER_PASSWORD": "xxxxxxxxxxxxx"
}
},
"vmoo-database-merchant": {
"command": "npx",
"args": ["vmoo-mcp-database-server@latest", "--env=merchant"],
"env": {
"MERCHANT_PASSWORD": "xxxxxxxxxxxxx"
}
}
}
}
npm install
npm test
如果看到 ✅ 连接成功,说明配置正确。
npm start
%APPDATA%\Augment\config.json
~/Library/Application Support/Augment/config.json
~/.config/Augment/config.json
在配置文件中添加:
{
"mcpServers": {
"vmoo-database-dev": {
"command": "node",
"args": ["D:\\代码库\\vmoo-mcp-server\\bin\\vmoo-mcp-dev.js"],
"env": {
"V_MOO_PASSWORD": "xxxxxxxxxxxxx"
}
},
"vmoo-database-prod": {
"command": "node",
"args": ["D:\\代码库\\vmoo-mcp-server\\bin\\vmoo-mcp-prod.js"],
"env": {
"V_MOO_PASSWORD": "xxxxxxxxxxxxx"
}
},
"vmoo-database-deliver": {
"command": "node",
"args": ["D:\\代码库\\vmoo-mcp-server\\bin\\vmoo-mcp-deliver.js"],
"env": {
"DELIVER_PASSWORD": "xxxxxxxxxxxxx"
}
},
"vmoo-database-merchant": {
"command": "node",
"args": ["D:\\代码库\\vmoo-mcp-server\\bin\\vmoo-mcp-merchant.js"],
"env": {
"MERCHANT_PASSWORD": "xxxxxxxxxxxxx"
}
}
}
}
注意: 请将路径替换为你的实际路径。
保存配置文件后,重启Augment应用。
配置成功后,你可以在Augment中直接询问:
用户: "VMOO数据库中有哪些用户相关的表?"
AI: 调用list_tables工具,返回包含user的表列表
用户: "fanwe_user表的字段都有什么含义?"
AI: 调用describe_table工具,返回表结构详情
用户: "最近一周注册的用户有多少?"
AI: 调用query_database工具,执行相应SQL查询
npm run dev
这将启用Node.js调试器,可以在Chrome DevTools中调试。
MCP服务器的日志会输出到stderr,可以通过以下方式查看:
node mcp-vmoo-database-server.js 2> debug.log
MIT License
FAQs
VMOO数据库MCP服务器集合 - 支持开发和生产环境的安全数据库访问
The npm package vmoo-mcp-database-server receives a total of 137 weekly downloads. As such, vmoo-mcp-database-server popularity was classified as not popular.
We found that vmoo-mcp-database-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.